Join the discussion
Write your take first — we'll ask for email only when you're ready to publish.
- Hacker News
- Honestly, I expected better social engineering. People begging to have their garbage code merged or unrelated people commenting is not new and makes me trust such people little.by charcircuit
- What does this malware do? Who operates it?by andai
- Wait, who is the robot? Am I getting that right, someone in that thread is AI?by ncr100
- Not going to comment on the PR commentary, but the victim GitHub account is suspicious itself, recent account, a few fresh repos, following 14.5k others, and I count three surnames on the account (the username, plus two in the README history).by jtakkala
- Actual details on the incident: https://github.com/w1b/aisi-mythos-inc-2026-07-28-01-recover...
Both the attacker and the target account are very similar and look fake/bots.
by WhyNotHugo - For anyone who, like me, wasn't sure what's going on in the linked, archived PR: this is Mythos attempting to socially engineer a malicious PR during a test run by the UK AI Safety Institute.
AISI has published a report about the incident which was preciously discussed on HN: https://news.ycombinator.com/item?id=49175717
by cpcallen