HackerBot Claw campaign: autonomous AI agent probes CI/CD across open-source repos
Date: 2026-02
Affected: Datadog and other OSS projects
Attack vector: agent-hijack
Category: real-world
Severity: High

Datadog Security Labs documented the 'HackerBot Claw' campaign in which an autonomous AI agent systematically probed CI/CD systems and attempted exploitation across open-source repositories, including malicious contributions to Datadog's own repos.


Mitigations:

Architectural layers (MAESTRO):