TL;DR: Our analysis shows attackers are now enumerating or pulling data within 15 minutes of getting into an environment, and the tools that should have caught them were not effective. We will discuss three common attack patterns in which we observed this behavior. Stolen developer tokens. Poisoned npm packages and infostealers pull GitHub tokens from developer laptops; attackers later use those tokens to exfiltrate data from GitHub. GitHub has no native detections for how a token is used, leaving enterprises vulnerable to code exfiltration ClickFix lures for AI tools. Fake Claude Code install commands in shared Claude chats load a macOS stealer that takes browser cookies and cloud credentials. The victim runs the commands themselves, much like they would when installing any tool, which…