BleepingComputer reported that Warp, a developer tool where AI agents write, test and deploy code, had data exposed through an attack on a vendor in its infrastructure. Founder and CEO Zach Lloyd said the company learned of the attack on Friday. He said Warp spotted it within hours and moved to limit the harm. He estimated that roughly 1% of Warp users may be affected. Warp's website says it has at least 800,000 users. Warp has told the users it identified as affected, contacted the vendor, and informed law enforcement. CrowdStrike is helping with the investigation.
Agent traces and telemetry (usage data sent back to the company) were named as potentially affected. BleepingComputer said Warp did not clarify whether source code, prompts, credentials or other sensitive details were included. The investigation is ongoing, and outside experts are involved. Lloyd said early analysis points to an attack run by "an agent swarm" using a very sophisticated technique. He said no details about the vendor's weakness have been shared. The vendor is not named in the report.
BleepingComputer linked this to a separate breach at OpenCode, an AI coding platform, which said last week that stored API keys were exposed. For teams that use AI coding tools, the logs those tools keep and the vendors behind them are part of the risk. Warp advises users to watch their accounts and be careful with unsolicited messages.