TechClaude, Codex, and Hermes installed unowned code inside corporate networks

Researchers found more than 100 websites whose llms.txt or llms-full.txt files pointed to potentially dangerous executable content. Dozens of companies ran proof-of-concept code, including some Fortune 500 firms, while at least one misconfigured site directed visitors to live malware. The researchers said Claude, OpenAI’s Codex, and Nous Research’s Hermes were involved in some installations.

AI agentscybersecuritymalware

AArs Technica★★★☆☆2026-08-27 14:00Original