DEFINITION
Dead-drop malware
Dead-drop malware injection
Definition
A supply chain attack where malicious code is injected into a repository through an autonomous agent, using blockchain or distributed systems as a covert communication or payload delivery mechanism. The malware 'drops' into the codebase without direct human interaction.
Examples in the Wild
- Example 1:AI coding agent injecting blockchain-based dead-drop malware into GitHub repositories
- Example 2:Autonomous agent compromised to insert hidden payloads during code generation