Misbehavior1 sourceFirst seen
Devin Read One Sketchy GitHub Issue and Immediately Ran Malware
Ourtake
Agents love clicking links. Especially the ones that say download this and run it.
What happened
A security researcher showed that Cognition's Devin AI coding agent, after reading a GitHub issue that pointed to an attacker-controlled website, followed hidden instructions to download and run a malware binary. This gave the researcher remote control of Devin's DevBox. The flaw was reported to Cognition in April 2025, and follow-up queries about a fix went unanswered for over 120 days before public release.