Warp Says Vendor Hack Hit Up to 1% of Users

Warp, the company behind a terminal and AI coding-agent app used by developers, says attackers exploited one of its vendors and reached “a limited amount of agent trace and telemetry data”. Chief executive Zach Lloyd said on 26 October that up to about 1% of Warp users may have been affected.

Lloyd set out the incident in a post on X, which Warp’s official account shared as “Reposting from our CEO”. Warp says on its website that it is trusted by more than 800,000 developers. It has not said how many users the 1% figure covers.

What Warp says happened

According to Lloyd, Warp became aware on Friday, 23 October, of “an active and narrow-banded exploitation of a vendor in Warp’s infrastructure”. He said: “We detected the operation within hours and were able to remediate and mitigate the impact.” Warp has been in touch with the vendor about the flaw.

Lloyd described the attack this way: “The attack appears to have come from an agent swarm using a very sophisticated penetration and escalation technique, likely starting with a hole in a vendor dependency, and ultimately accessing a limited amount of agent trace and telemetry data.”

That account is Warp’s early view. The words “appears” and “likely” matter: no outside party has yet confirmed that a swarm of AI agents carried out the attack, or how it got in.

“Everyone who uses Warp places a lot of trust in us and that’s not something we take lightly. I’m very sorry that this incident has occurred,” Lloyd wrote.

Who is affected and what happens now

Lloyd said Warp worked through the weekend and has “notified anyone who we have positively identified as impacted”. As of 26 October, “we believe an upper bound of roughly 1% of Warp users may have been impacted,” he said.

Warp is “working closely with the team at Crowdstrike” on a fuller investigation and has “engaged law enforcement”. Lloyd said: “Anyone who has been impacted will receive instructions from us on action they need to take.”

Several key details are still missing. Warp has not named the vendor or the flaw. It has not said which data fields were in the traces and telemetry, or whether they included code, prompts, file paths or credentials. It has also not said what the instructions to affected users will ask them to do. Lloyd said Warp “will continue to post updates as we learn more”.

Why agent traces are sensitive data

Agent traces are the records of what an AI coding agent was asked to do and what it did: the steps it took, the commands it ran and what came back. In a developer tool, that can include details of a person’s projects and systems. That is why this kind of data needs careful handling, even when a company calls the amount taken “limited”.

The vendor route is also familiar. Modern apps are built from many outside services and code libraries, and a weakness in any one of them can open a path into the main product. TSN has covered two recent cases where developer tools became the way in: OpenCode Console users reported unauthorised charges on their AI accounts after a breach, and attackers swapped OVHcloud command-line releases for a secret-stealing version. Warp’s case differs because the weak point was a vendor, not Warp’s own code, according to Lloyd.

The agent-swarm claim, if it holds up, points to attackers using the same kind of automation that tools like Warp sell. Microsoft has already said companies should treat AI agents as possible insider risks and watch them with other agents. For now, though, the attribution rests on Warp’s first look, and CrowdStrike’s findings will matter more than the early description.

Warp’s response so far looks quick: detection within hours, users notified within days, and an outside firm brought in. What users most need next is the detail. Until Warp says what the traces held, people who used its agents on sensitive work cannot judge their own risk.

What to watch

The next useful update from Warp would name the vendor, list the data types involved and say whether any credentials need to be changed. Users who receive a notice from Warp should follow its instructions.