--- title: "JFrog's lab found 42 hijacked repos wired to fire in Claude and Cursor; its stock is up 61% in 2026" description: "JFrog's lab published three finds this week that all sit on AI tooling: credential-stealing LiteLLM wheels, 42 booby-trapped repos wired to Claude and Cursor, and an actively exploited Brotli flaw. The market has priced the fear; the November guide will show whether it converts to bookings." publisher: "The Inference" section: "Security" published: 2026-10-28T15:28:14.082Z modified: 2026-10-28T15:28:14.082Z canonical: https://theinference.org/article/jfrog-s-lab-found-42-hijacked-repos-wired-to-fire-in-claude-and-cursor-its-stock-is-up-61-in-2026 language: en keywords: "JFrog, Supply Chain Security, AI Security, Software Stocks, Earnings" --- # JFrog's lab found 42 hijacked repos wired to fire in Claude and Cursor; its stock is up 61% in 2026 > JFrog's lab published three finds this week that all sit on AI tooling: credential-stealing LiteLLM wheels, 42 booby-trapped repos wired to Claude and Cursor, and an actively exploited Brotli flaw. The market has priced the fear; the November guide will show whether it converts to bookings. Three [JFrog](https://theinference.org/markets/companies/jfrog) research finds in one week all sit on the same surface: the tooling developers now run AI with. [Malicious LiteLLM 1.107.0 wheels on PyPI ran at Python startup](https://research.jfrog.com/post/litellm-hijacked-again/) and stole AI provider credentials, [GitHub](https://theinference.org/markets/companies/microsoft) tokens and cloud keys [1]. [Forty-two hijacked GitHub repositories](https://cybersecuritynews.com/hackers-hijack-42-github-repositories/) hid a 13 MB payload wired to fire the moment a developer opens a project in Claude, Gemini, Cursor or VS Code [2][3]. And [Brotli2Shell, a CVSS 9.2 flaw in Google's Brotli decoder, is under active exploitation](https://www.helpnetsecurity.com/2026/10/27/node2shell-broccoli2shell-vulnerability-cve-2026-111497/) and forced emergency patches across Node.js, .NET and Python [4][5]. The chain is clear: AI coding tools expanded what a developer's machine trusts, and attackers followed. Enterprises that put models and AI agents into their build pipelines now need to scan skills, plugins, MCP servers and AI packages the way they scan code. JFrog's lab finds these threats, and its AI Security product just [extended scanning onto developer workstations](https://www.heise.de/news/JFrog-AI-Security-Mehr-Kontrolle-ueber-Schatten-KI-auf-Entwicklerrechnern-11496904.html), with customers running AI asset scans on their own model keys [6]. ## The market has priced the fear KeyBanc [reiterated JFrog Overweight on October 27](https://ng.investing.com/news/stock-market-news/keybanc-reiterates-jfrog-stock-overweight-rating-on-security-demand-93CH-2760606), citing security demand, and the stock has returned roughly 61% this year against the S&P 500's 13.5% [7]. JFrog's security core and cloud revenue drove its fiscal Q2 beat, with cloud revenue up 53% year on year [8]. *Chart: **JFrog has returned 60.8% this year, triple the S&P 500** Bars chart comparing 2026 year-to-date total returns: JFrog 60.8%, QQQ 17.7%, S&P 500 13.5%, with JFrog highlighted in gilt.* *2026 year-to-date total return through October 26, 2026, per Trefis. Sources: Trefis, October 27, 2026. [8]* ## The November print is the test Management [guides November revenue to $164 million to $166 million](https://www.trefis.com/stock/frog/articles/620808/can-jfrog-stock-keep-its-lead-over-its-industry/2026-10-27), about 20% growth, down from 28.7% in fiscal Q2, and keeps forecasts cautious on usage above customers' contractual commitments [8]. The finds published this week are exactly what the newest product line scans for. The November report is the first test of whether the lab's fear converts into bookings, or only into followers. *Chart: **The growth engine slows: cloud 53%, total 28.7%, the November guide about 20%** Column chart of JFrog's year-on-year revenue growth: cloud revenue up 53% in fiscal Q2, total revenue up 28.7%, and November guidance of about 20% growth.* *Year-on-year growth rates. Cloud and total figures are fiscal Q2 2026 results; the November guide is management's forecast of $164 million to $166 million, about 20% growth. Sources: Trefis, October 27, 2026. [8]* For teams, the takeaway stands on its own: verify the wheel you install, not just the source, and treat AI tool config files as attack surface. Start there, and learn what your own AI stack actually trusts. ## Takeaway JFrog's research lab put AI developer tooling on the threat map this week with three finds, and the market has already paid up; the November report, guided to about 20% revenue growth, is the first read on whether the fear converts to bookings. ## Sources 1. [JFrog Security Research, LiteLLM Hijacked Again: Malicious 1.107.0 Wheels Steal Credentials, 21 October 2026](https://research.jfrog.com/post/litellm-hijacked-again/) 2. [CyberSecurityNews, Hackers Hijack 42 GitHub Repositories to Plant Malware Traps for Claude, Gemini, and Cursor Users, 28 October 2026](https://cybersecuritynews.com/hackers-hijack-42-github-repositories/) 3. [@JFrogSecurity on X, testmetest goes beyond npm, October 2026](https://x.com/JFrogSecurity/status/2114655127529279652) 4. [@JFrogSecurity on X, Brotli2Shell goes beyond HTTP2Shell, October 2026](https://x.com/JFrogSecurity/status/2114463578086383801) 5. [Help Net Security, Brotli bug reaches far beyond Node.js (CVE-2026-111497), 27 October 2026](https://www.helpnetsecurity.com/2026/10/27/node2shell-broccoli2shell-vulnerability-cve-2026-111497/) 6. [heise online, JFrog erweitert Schatten-KI-Erkennung auf Entwicklerrechner (BYOK), 28 October 2026](https://www.heise.de/news/JFrog-AI-Security-Mehr-Kontrolle-ueber-Schatten-KI-auf-Entwicklerrechnern-11496904.html) 7. [Investing.com, KeyBanc reiterates JFrog stock Overweight rating on security demand, 27 October 2026](https://ng.investing.com/news/stock-market-news/keybanc-reiterates-jfrog-stock-overweight-rating-on-security-demand-93CH-2760606) 8. [Trefis, Can JFrog Stock Keep Its Lead Over Its Industry?, 27 October 2026](https://www.trefis.com/stock/frog/articles/620808/can-jfrog-stock-keep-its-lead-over-its-industry/2026-10-27) --- JFrog's lab found 42 hijacked repos wired to fire in Claude and Cursor; its stock is up 61% in 2026 — The Inference. Canonical: https://theinference.org/article/jfrog-s-lab-found-42-hijacked-repos-wired-to-fire-in-claude-and-cursor-its-stock-is-up-61-in-2026