A malware dev has committed a magnificent self-own after an AI-coded malicious package leaked its own GitHub private token

A still from the God of War Ragnarok trailer showing someone looking up at the sky in surprise.

We're continually warned about the prospect of AI-generated malware these days, but there is one important factor working in our favour: sometimes, it's kinda rubbish.

Ox Security researchers have discovered an info-stealing malicious npm package called mouse5212-super-formatter, designed to target Claude users. The nasty little blighter reached 676 downloads before being unmasked, after the apparently AI-coded malware leaked its own GitHub private token (via The Registry).