HackerBot-Claw: An AI-Assisted Campaign Targeting GitHub Actions Pipelines

Executive summary Introduction On February 27-28, 2026, multiple high-profile open-source projects were impacted by a coordinated GitHub repository compromise campaign. The activity was later attributed to “HackerBot-Claw”, an automated operation exploiting misconfigured GitHub Actions workflows to achieve remote code execution and privileged token theft across CI/CD pipelines. February 20, 2026:  February 21-28, 2026:  February 27, […]

The post HackerBot-Claw: An AI-Assisted Campaign Targeting GitHub Actions Pipelines appeared first on Orca Security.