Claude、Codex、Hermes 在企業網路中安裝無主程式碼
研究人員在企業文件中發現 227 條指向無主程式碼的安裝命令，這些命令由 Claude、Codex、Hermes 等 AI 代理執行，構成安全風險。
researchers at a stealth startup in israel scanned 6,214 live domains belonging to defense contractors, fortune 500, and big tech companies. they found 8,265 llms.txt and llms-full.txt files, of which 120 pointed to unregistered code packages or domain names. ai agents like claude, codex, and hermes installed unowned code, posing security risks. at least one misconfigured site directed visitors to live malware. this vulnerability occurs when coding agents treat llms.txt and llms-full.txt files as authoritative setup documentation.