ChainDrop: Opening a Repository Is Enough to Execute Attacker Code
ChainDrop: Opening a Repository Is Enough to Execute Attacker Code is a critical-severity remote code execution issue in Opening a Repository Is Enough to Execute Attacker Code, an AI agent. It has been exploited in the wild.
Is Opening a Repository Is Enough to Execute Attacker Code running on your developers' machines? Anomity finds every device with this AI agent installed, shows the version, and can block it by policy. Detect this across your developers' devices with Anomity →
Key facts
- ID
chaindrop-opening-a-repository-is-enough-to-execute-attacker-code- Severity
- critical
- Attack type
- Remote code execution, Supply chain compromise, Malware
- Component
- Opening a Repository Is Enough to Execute Attacker Code · AI agent
- Known exploited
- Yes
- Published
- Last verified
What is this vulnerability?
Pillar Security and Microsoft threat intelligence both documented ChainDrop, a self-propagating supply chain compromise where merely opening a repository is sufficient to run attacker code, with no build step and no explicit consent. Once running it spreads onward, which is what turns a single poisoned repository into a worm rather than a single victim.
Am I affected by this vulnerability?
You are affected if Opening a Repository Is Enough to Execute Attacker Code is installed or configured on a machine. Check the references for the exact versions.
How do I fix it?
Disable automatic execution of workspace-scoped configuration when opening untrusted repositories, and keep folder-trust prompts enabled rather than blanket-trusting parent directories. Review any repository opened from an untrusted source for editor and agent config that runs on open.
How do I find every machine running Opening a Repository Is Enough to Execute Attacker Code?
Anomity inventories the AI agents, MCP servers, IDE extensions and skills on each developer device, so you can see which machines run Opening a Repository Is Enough to Execute Attacker Code and which version, then enforce a policy on it.