AI Agent Prompt Injection — Outbound Network Call from Repo Process Post-Git-Clone

Ibrahim Saud@tektrix

•updated Jun 29, 2026•0•0•0

This rule detects potentially suspicious network connections originating from processes residing in common Git development directories (e.g., node_modules, temp, workspace) shortly after a Git clone, pull, or fetch operation. The detection logic filters for successful connections to non-private, non-whitelisted remote endpoints, which may indicate an adversary leveraging legitimate developer tools and environments for command-and-control (C2) or payload exfiltration.