Outbound TLS to Bitbucket from Internal AI Coding Agent Hosts

Ibrahim Saud@tektrix

•updated 21 days ago•0•0•5

Detects outbound network traffic directed to Bitbucket (via TLS/443) or using the git protocol (via port 9418). Such connections from internal systems to unverified or unauthorized external Git repositories may indicate malicious activity, including the potential installation of malicious plugins or code via supply chain compromises (e.g., Plugin4Shell).