BioShocking: AI Browser Agent DNS Query to GitHub API/Raw Content

Ankit Mehta@Secvyn

•updated Jun 30, 2026•0•0•2

Detects DNS queries to GitHub API domains originating from non-standard or potentially spoofed process names associated with various AI tools, which may indicate data exfiltration or unauthorized interaction with repositories.