Hacker left his AI-agent crew's whole workspace public: 142K files
A misconfigured Python server exposed a hacker's home directory to the internet. CloudSEK mirrored 142,262 files reconstructing a fleet of AI coding agents that run intrusions on autopilot against WordPress, crypto and DeFi targets — session transcripts, shell history, stolen creds, a blockchain C2 in development. Nothing got hacked; the operator just left directory listing on.