---
title: SymJack Attack Hijacks AI Coding Agents to Deliver Supply Chain Attacks
description: Discover SymJack, a new AI attack method exploiting coding agents to inject malicious code, risking developer trust and security.
canonical_url: https://codekeeper.co/ticker/symjack-ai-attack-on-coding-agents
---

# SymJack Attack Hijacks AI Coding Agents to Deliver Supply Chain Attacks

Discover SymJack, a new AI attack method exploiting coding agents to inject malicious code, risking developer trust and security.

![Content Team](https://codekeeper.co/hubfs/_sized/Codekeeper_21_beeldmerkL-800.png)

By Content Team May 28, 2026

Share [![Share on facebook](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Facebook.svg)](http://www.facebook.com/share.php?u=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fsymjack-ai-attack-on-coding-agents%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on linkedin](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Linkedin.svg)](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fsymjack-ai-attack-on-coding-agents%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on twitter](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20X.svg)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fsymjack-ai-attack-on-coding-agents%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fsymjack-ai-attack-on-coding-agents%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=) [![Share on email](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Mail.svg)](mailto:?subject=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Fsymjack-ai-attack-on-coding-agents%3Futm_medium%3Dsocial%26utm_source%3Demail%20&body=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Fsymjack-ai-attack-on-coding-agents%3Futm_medium%3Dsocial%26utm_source%3Demail) ![Copy link](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Copy.svg)

ON THIS PAGE

### Want more insights like this?

Subscribe to our newsletter to get the latest software protection strategies delivered to your inbox.

By submitting your email, you consent to Codekeeper contacting you and agree to our [privacy policy](https://codekeeper.co/privacy-policy) .

Security researchers at Adversa AI have uncovered a novel attack technique called SymJack that weaponizes AI coding agents to silently inject malicious code into software pipelines. It starts with a repository the attacker controls: the agent ingests the project's instruction file, then asks the developer to approve what looks like a routine file copy.
The copy's destination is a symlink pointing into the agent's own config directory, so the kernel writes attacker JSON there instead — quietly registering a rogue MCP server. On the next restart, the attacker's code runs as the user and unsandboxed. That means SSH keys, cloud tokens and browser sessions on a developer's machine. On a CI runner it means deploy keys, signing material and registry tokens — which is how a poisoned pull request becomes a supply chain problem. Adversa confirmed SymJack against six agents — Claude Code, Gemini CLI, Cursor Agent CLI, GitHub Copilot CLI, Grok Build CLI and OpenAI Codex CLI — with Google's Antigravity CLI affected too. Most vendors declined: Google called it a single-user self-attack, OpenAI called it theoretical, Cursor a duplicate. Anthropic rejected the report as out of scope, then quietly hardened Claude Code to resolve symlinks before asking for approval. Adversa's point is that the agents are only following instructions — but it still lists fixes they could ship, and tells teams to deny shell writes into config directories, turn off project-scoped MCP execution, and scan repos for tracked symlinks aimed at config files. **Source:** [SecurityWeek](https://www.securityweek.com/symjack-attack-turns-ai-coding-agents-into-supply-chain-attack-delivery-systems/)

Share this article [![Share on facebook](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Facebook.svg)](http://www.facebook.com/share.php?u=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fsymjack-ai-attack-on-coding-agents%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on linkedin](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Linkedin.svg)](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fsymjack-ai-attack-on-coding-agents%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on twitter](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20X.svg)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fsymjack-ai-attack-on-coding-agents%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fsymjack-ai-attack-on-coding-agents%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=) [![Share on email](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Mail.svg)](mailto:?subject=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Fsymjack-ai-attack-on-coding-agents%3Futm_medium%3Dsocial%26utm_source%3Demail%20&body=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Fsymjack-ai-attack-on-coding-agents%3Futm_medium%3Dsocial%26utm_source%3Demail) ![Copy link](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Copy.svg)

![blog_book_a_demo_cta_3x](https://codekeeper.co/hubfs/_sized/Codekeeper%202025/blog_book_a_demo_cta_3x-768x512.webp)

Have questions about protecting your software?

Our escrow experts are standing by to help.

[Book a free demo](https://codekeeper.co/book-a-demo)

YOU MAY ALSO LIKE

[Ransomware Gunra Ransomware Gang Exploits Fortinet Flaws and Bypasses MFA in Global Attacks Aug 14, 2026](https://codekeeper.co/ticker/gunra-ransomware-threatens-global-infrastructure)

[N-able's Passportal Exposed Complete Customer Password Vaults to Any Website Aug 21, 2026](https://codekeeper.co/ticker/n-able-passportal-flaw-exposes-passwords)

[Cyberattacks Red Heron Hackers Exploit Critical Gitea Flaw to Hijack Servers Sep 16, 2026](https://codekeeper.co/ticker/red-heron-exploits-gitea-flaw-cve-2026-60004)

[Software security Five Alleged Black Axe Members Extradited to Face US Charges Sep 15, 2026](https://codekeeper.co/ticker/black-axe-leaders-extradited-romance-scams)