Case gtig-quietvault-stealerAI-assisted malwareWorldwide
QUIETVAULT stealer uses local AI CLI tools to hunt secrets and leaks GitHub and npm tokens
GTIG documented QUIETVAULT, a JavaScript stealer seen in operations that takes GitHub and npm tokens, then drives AI command-line tools on the host to find more secrets and exfiltrates via a public GitHub repo.
HighAttack using AIStatus: OngoingVerified case file
Open in the interactive mapCite this case
- Reported
- Nov 5, 2025
- Location
- Worldwide
- Target
- Developers with GitHub and npm tokens
- Severity
- High
- Triggered by
- Unknown
- Actor type
- Criminal
- Reported loss
- None reported
- CVE
- None
What happened
GTIG documented QUIETVAULT, a JavaScript stealer seen in operations that takes GitHub and npm tokens, then drives AI command-line tools on the host to find more secrets and exfiltrates via a public GitHub repo.
Impact: Developer tokens exposed through public repositories; scale not published.
Who triggered it
Actor: Unknown
Attribution: GTIG listed the family as observed in operations without naming an operator.
Motive: Credential theft for supply-chain and account compromise
How it happened
Attack vector: Stealer abuses locally installed AI CLI agents as a secret-discovery engine
Root cause: AI coding agents on developer hosts can be driven by malware to search the filesystem
Timeline
- QUIETVAULT observed stealing GitHub and npm tokens in live operations
- GTIG publishes the family in its AI Threat Tracker
Response
Google described the family and recommended monitoring of AI CLI use on hosts.
Current status: Ongoing
Sources (open in a new tab)
- GTIG AI Threat Tracker November 2025 cloud.google.com
- Hendry Adrian mirror hendryadrian.com
Cite this case
QUIETVAULT stealer uses local AI CLI tools to hunt secrets and leaks GitHub and npm tokens. AI Threat Watch, case gtig-quietvault-stealer, Nov 5, 2025. https://aithreat.io/cases/gtig-quietvault-stealer/
Permanent link: https://aithreat.io/cases/gtig-quietvault-stealer/