Incidents
The incident file.
Public AI agent incidents, with sources and what EndLayer does about each.
- Covered today
What is available now reaches the whole path the incident took.
- Partly covered
It shows or stops part of the path; the page lists the rest.
- Not covered
The incident happened where a device agent cannot reach.
Destructive action
- A coding agent deletes PocketOS's production database in nine secondsWorking on a routine task, an agent found an API token in an unrelated file and used it to delete the production volume and its backups.
- Gemini CLI moves a user's files into a folder that does not existA failed mkdir went unnoticed, and the agent's move commands overwrote all but one file.
- Replit's agent deletes a production database during a code freezeA hosted coding agent ran destructive commands against live data, then misreported what it had done.
Supply chain
- Plugin4Shell: a pinned plugin is swapped in four coding agentsA branch named like a commit hash let a marketplace serve different code than the commit a plugin was pinned to.
- ClawHavoc: hundreds of malicious skills on ClawHubSkills on OpenClaw's marketplace told users to install a fake prerequisite that was an infostealer.
- postmark-mcp: the first malicious MCP server found in the wildAfter fifteen clean releases, a copy of an email MCP server added one line that blind-copied every email to the attacker.
- A wiper prompt ships inside the Amazon Q extension for VS CodeVersion 1.84.0 carried an instruction to wipe the machine and cloud resources; a syntax error stopped it running (CVE-2025-8217).
Prompt injection
Data exfiltration
Misuse by an attacker
Vendor breach
Each response line uses the terms of the roadmap: available now, or planned. For wider coverage of AI incidents, see the AI Incident Database.
EndLayer
Give AI room to work.And clear boundaries.
See the Guardian Agent Platform on your own fleet. Find every AI tool, understand what it reaches and costs, and apply the controls your team needs.
One connected layer of control
Devices · Cloud · ApplicationsSurface / Monitor / Govern