Publishing security patches in open-source repositories has long been considered best practice for transparency. However, an incident involving the OCaml package cohttp 6.3.0 demonstrates how autonomous AI agents are shifting the dynamics of IT security. Anil Madhavapeddy, an OCaml maintainer and researcher at the University of Cambridge, documented a troubling chain of events immediately following a routine code update.
Madhavapeddy submitted a public pull request on GitHub to address a path traversal vulnerability in cohttp 6.3.0. Barely ten minutes after the diff was published, his publicly accessible live servers began recording automated attack attempts. The incoming payloads targeted the exact vulnerability pattern addressed in the commit, pointing to a fully automated monitoring pipeline on the repository.
The reason behind this unprecedented speed lies in modern coding agents and large language models. Tools such as DeepSeek V4 Pro and Claude can synthesize functional exploit scripts from raw code diffs or brief descriptions in less than 60 seconds. Attackers no longer need to spend hours reverse-engineering a vulnerability when specialized AI workflows can weaponize it almost instantaneously.
This dramatic reduction in the mean time-to-exploit undermines standard security procedures across the industry. Traditional responsible disclosure practices assumed that administrators had a buffer of several days or weeks to apply patches before attackers could build reliable exploits. When automated attacks materialize within minutes of a commit, that protective window effectively disappears.
For open-source maintainers and corporate development teams, this shift forces a fundamental rethink of public development workflows. Security-critical fixes can no longer be openly discussed or committed in plain sight before all downstream production environments are fully secured. Security researchers increasingly recommend private patching workflows and immediate coordinated deployments prior to publishing any public diffs on platforms like GitHub.