BeepRAT/CVE-2026-12957 AWS Credential Harvest via MCP Auto-Execution in AI Tools

Ibrahim Saud@tektrix

•updated Jun 30, 2026•1•0•9

Detects the AWS CLI being spawned by processes associated with AI coding extensions (e.g., VS Code extension hosts, Cursor, Windsurf) while executing commands indicative of cloud credential discovery or harvesting (e.g., sts, get-caller-identity, configure export). This activity is indicative of a supply chain compromise or exploitation where an adversary leverages an AI coding tool environment to access cloud credentials stored on the developer's workstation.