sigil-cli 1.3.7
Legitimate security scanner tool
“Automated security auditing for AI agent code - quarantine-first scanning for pip, npm, git repos, and MCP servers”
AI provider keys harvested then posted outDeveloper credential target with network exfiltration
SHA-256dd446e2d61105e7df667d21f589dce834947507f738bd1b4a700e852fe96d8a2