Warp, the agentic development environment used by at least 800,000 developers, has disclosed that agent decision logs and telemetry data were exposed in a compromise of a third-party vendor inside its infrastructure. Founder and CEO Zach Lloyd said Warp became aware on Friday of "active and narrow-banded exploitation of a vendor in Warp's infrastructure", detected and remediated within hours, and estimates "roughly 1% of Warp users may have been impacted" — around 8,000 people. The company has not confirmed whether the exposed data included source code, prompts or credentials, and analysis of the incident reportedly indicates an "agent swarm" relying on a sophisticated penetration and escalation technique. CrowdStrike has been engaged and law enforcement notified. The incident follows last week's breach at AI coding platform OpenCode, where about 1.4% of users had stored API keys exposed and some suffered unauthorised charges of up to US$1,700 — the second supply-chain hit to AI development tooling in as many weeks, and a signal that agent orchestration layers are now squarely in attackers' sights.

• Source article