Podbit · The a16z Show
Attackers are hijacking AI tools already installed on developer machines by delivering payloads as prompts inside markdown files. To EDR software, this looks like a developer normally prompting Claude. The AI then silently searches the filesystem for credentials and exfiltrates them — invisible to traditional security tooling.
Where this was said
At 13:30 · chapter starts 12:12
The episode's most cinematic moment: Joel de la Garza asks whether an active npm breach he'd heard about is still ongoing. Feross confirms — it's not one repo, it's hundreds. It's a worm. This is the concept the security community had theorized in blog posts for years: backdoor a package, use stolen developer credentials during installation to self-propagate, repeat. Someone finally actually did it, almost certainly using AI tools to write the malware. The threat group even open-sourced their vibe-coded toolkit, and copycat attacks have followed. But the story doesn't end with the worm itself. Feross describes a novel attack layer that is genuinely alarming: attackers are now delivering payloads as prompts inside markdown files, which are then executed silently by local AI CLI tools already running on developer machines. To an EDR system, this looks like a developer normally prompting Claude. Nothing is flagged. The AI searches the filesystem for credentials and exfiltrates them without a trace. [1] — Feross Aboukhadijeh "While recording this episode at Black Hat 2026, an npm worm was actively spreading across hundreds of repositories. The attack, likely vibe…" 12:12 [2] — Feross Aboukhadijeh "Attackers are hijacking AI tools already installed on developer machines by delivering payloads as prompts inside markdown files. To EDR so…" 13:30
During the Black Hat conference recording, an active npm worm was spreading across a few hundred repositories, with a maintainer whose insecure GitHub Action was likely the entry point.
While recording this episode at Black Hat 2026, an npm worm was actively spreading across hundreds of repositories. The attack, likely vibe-coded by the threat group that open-sourced their toolkit, exploited an insecure GitHub Action to steal tokens and self-propagate — a scenario the security community had theorized but never seen at scale.
Attackers are using AI tools already installed on developer machines by delivering payloads as prompts in markdown files, bypassing traditional EDR tooling entirely.
Sam had no coding knowledge, so he used ChatGPT voice mode to generate his entire codebase and copy-pasted it into Notepad. A friend later introduced him to Cursor, and he never looked back.
Copy days of Discord chat history, paste it into ChatGPT, and ask it to list recurring pain points. The ones that come up most often are your best product bets.
Sam's top advice: when prompting Cursor, tell it to architect code for 100,000 users from day one. The AI changes its approach, building scalable frameworks instead of brittle one-user code.
With AI coding tools like Cursor, Bhanu replicates an existing free tool for a new keyword in under 5 minutes. What used to be a multi-day build is now a lunch-break task.
Ahrefs, SiteGPT, Cal.com, PostHog, Datafast, Sibyl AI, Bento, Feather, Featurepace, Mintlify, Cloud Code, ChartMogul — Bhanu runs his entire business solo with these 12 tools.
PropGPT runs on React Native with TypeScript and Python for ML, Neon for the database, RevenueCat and Superwall for monetization. LLM costs are $20/month, data APIs $100/month, and after $10K in monthly marketing spend, margins sit at roughly 50%.
Game apps keep users engaged long enough for ads to pay off. Tool apps don't — so if you're building a utility, ads are almost always the wrong call and subscriptions are your only real lever.
Inside SEO Bot, a single button labelled 'Boost My Domain Rating' routes users directly to Listing Bot. That one interaction converts a user of one tool into a user of two — without any marketing cost.
Directory listings are a powerful but underrated growth channel — but only if your product is genuinely interesting enough to earn the click. AI products have a natural advantage here because they're easy to package in a compelling, clickable way.
We use essential and analytics cookies to run Vuci. To understand how the site is used: Privacy Policy.
Install Vuci on your phone
Add it to your home screen for a faster, app-like experience.
Install Vuci on your phone
Tap the Share button, then “Add to Home Screen”.
A new version is available
Reload to get the latest Vuci.