{"id":71705,"date":"2026-08-31T06:37:17","date_gmt":"2026-08-31T06:37:17","guid":{"rendered":"https:\/\/www.europesays.com\/france\/71705\/"},"modified":"2026-08-31T06:37:17","modified_gmt":"2026-08-31T06:37:17","slug":"top-ai-tools-including-claude-codex-and-hermes-installed-suspicious-code-inside-corporate-networks","status":"publish","type":"post","link":"https:\/\/www.europesays.com\/france\/71705\/","title":{"rendered":"Top AI tools including Claude, Codex, and Hermes installed suspicious code inside corporate networks"},"content":{"rendered":"

Researchers found unclaimed llms.txt references on 120 domains, exploitable by cybercriminalsAI agents could install malware if they execute hallucinated or outdated documentation commandsFixes: clean documentation and restrict AI agents from treating docs as executable instructions<\/p>\n

Cybercriminals are able to now abuse hallucinated, outdated, and outright incorrect website documentation to deliver malware to unsuspecting victims through AI agents<\/a>, new research has claimed.<\/p>\n

An increasing number of websites now contain two documents: llms.txt, and llms-full.txt. These are conventions that allow AI agents to properly read the contents of the websites. If an AI agent is looking to install software or add code to a project, they can search through these documents across the web until they find a fitting solution.<\/p>\n

<\/p>\n

Researchers have analyzed 6,214 live domains belonging to defense contractors, Fortune 500 organizations, as well as big tech. On these domains they found 8,265 of these .txt files and among them 120 (all on a different site) pointing to one or more code packages and domain names that weren\u2019t registered at all.<\/p>\n

Latest Videos FromTechRadar<\/p>\n

Claiming packages and domains<\/p>\n

There can be a myriad of reasons why they\u2019re not registered. It can be due to human error, renamed or abandoned packages, copy\/paste errors, or hallucinated documentation.<\/p>\n

Now, for the purpose of the experiment, the researchers registered some of these unclaimed names and hosted packages that would phone home when installed. It took less than an hour for a Fortune 500 company to start pinging, and the numbers soon grew to \u201ca few dozen more\u201d.<\/p>\n

You may like<\/p>\n

This means that if the researchers can do it, so can cybercriminals. In theory, a cybercriminal could find these unclaimed packages and register malware<\/a>. If an AI agent has permission to execute shell\/package-manager commands and stumbles upon this documentation, it can end up infecting the device.<\/p>\n

Claude, OpenAI\u2019s Codex, and Nous Research\u2019s Hermes were all \u201cguilty\u201d, the researchers said.<\/p>\n

Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed!<\/p>\n

To fix the vulnerability, two things need to happen. First, companies need to clean up their documentation and make sure it\u2019s not pointing towards non-existent or malicious content. Second, AI agents need to stop treating documentation as executable instructions. Since the latter most likely isn\u2019t happening any time soon, the immediate answer would probably lie in the former. In the meantime, organizations using AI for coding should consider the risks when granting AI agents permission to execute commands.<\/p>\n

Via Ars Technica<\/a><\/p>\n

\"Best<\/p>\n

\nThe best antivirus for all budgets\n<\/p>\n

Our top picks, based on real-world testing and comparisons<\/p>\n

<\/p>\n

\n

\"Google\n<\/p>\n

<\/a><\/p>\n

Follow TechRadar on Google News<\/a> and add us as a preferred source<\/a> to get our expert news, reviews, and opinion in your feeds.<\/p>\n","protected":false},"excerpt":{"rendered":"Researchers found unclaimed llms.txt references on 120 domains, exploitable by cybercriminalsAI agents could install malware if they execute…\n","protected":false},"author":2,"featured_media":71706,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[12919],"tags":[4953],"class_list":["post-71705","post","type-post","status-publish","format-standard","has-post-thumbnail","category-hermes","tag-hermes"],"_links":{"self":[{"href":"https:\/\/www.europesays.com\/france\/wp-json\/wp\/v2\/posts\/71705","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.europesays.com\/france\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.europesays.com\/france\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/france\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/france\/wp-json\/wp\/v2\/comments?post=71705"}],"version-history":[{"count":0,"href":"https:\/\/www.europesays.com\/france\/wp-json\/wp\/v2\/posts\/71705\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/france\/wp-json\/wp\/v2\/media\/71706"}],"wp:attachment":[{"href":"https:\/\/www.europesays.com\/france\/wp-json\/wp\/v2\/media?parent=71705"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.europesays.com\/france\/wp-json\/wp\/v2\/categories?post=71705"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.europesays.com\/france\/wp-json\/wp\/v2\/tags?post=71705"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}