Claude, Codex, Hermes install unowned code in corporate networks
researchers found 227 install commands in corporate docs pointing to unowned code, executed by ai agents like claude, codex, and hermes, posing security risks.
researchers at a stealth startup in israel scanned 6,214 live domains belonging to defense contractors, fortune 500, and big tech companies. they found 8,265 llms.txt and llms-full.txt files, of which 120 pointed to unregistered code packages or domain names. ai agents like claude, codex, and hermes installed unowned code, posing security risks. at least one misconfigured site directed visitors to live malware. this vulnerability occurs when coding agents treat llms.txt and llms-full.txt files as authoritative setup documentation.