[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-coding-agents-quietly-ran-unclaimed-code-at-fortune-500-firms":10,"sections":35},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":24,"tags":25,"sources":30,"feedback":34,"feedback_at":22,"cost_usd":34,"total_tokens":34},5882,"coding-agents-quietly-ran-unclaimed-code-at-fortune-500-firms","Coding Agents Quietly Ran Unclaimed Code At Fortune 500 Firms","A stealth startup planted bait in llms.txt files and watched Claude, Codex, and Hermes agents execute unclaimed code at Fortune 500 companies without review.","AI coding agents will run code that doesn't exist yet, as long as a website tells them to.\n\nResearchers at an Israeli stealth startup scanned 6,214 domains belonging to defense contractors, Fortune 500 firms, and Big Tech companies, and found 8,265 llms.txt and llms-full.txt files, the machine-readable site summaries that are becoming an AI-era version of robots.txt. Of those, 120 files across different sites referenced code packages or domain names that nobody had actually registered. The researchers claimed a handful of the unclaimed names and packages, rigging them to phone home the moment something tried to run them. Within an hour a Fortune 500 company's system called in, and over the following days a few dozen more followed, including additional Fortune 500 firms and startups.\n\nThe beacon logged the parent processes behind each install, and they traced back to Claude, OpenAI's Codex, and Nous Research's Hermes, meaning coding agents inside real corporate networks fetched and ran code nobody owns with no human checking whether the package was real. At least one misconfigured site was already pointing toward live malware instead of a harmless research beacon, so the risk isn't hypothetical. Anthropic, OpenAI, and Nous Research all declined to comment.\n\nllms.txt was pitched as a courtesy note for AI crawlers. Right now it doubles as an unlocked door, and nobody in this story has claimed responsibility for locking it.","[\"ai-agents\",\"supply-chain-attack\",\"llms.txt\",\"security-research\"]","2026-08-27T14:00:13.000Z","2026-08-27T16:24:35.563Z","2026-08-27T16:24:47.461Z","published",null,[],"security",[26,27,28,29],"ai-agents","supply-chain-attack","llms.txt","security-research",[31],{"name":32,"url":33},"Ars Technica","https:\u002F\u002Farstechnica.com\u002Fsecurity\u002F2026\u002F08\u002Fclaude-codex-and-hermes-installed-unowned-code-inside-corporate-networks\u002F",0,{"sections":36},[37,42,46,51,56,61,66,71,76,81,86,91,96,101],{"name":38,"slug":39,"count":40,"latest_published_at":41},"AI","ai",3337,"2026-08-27T18:06:52.000Z",{"name":43,"slug":24,"count":44,"latest_published_at":45},"Security",493,"2026-08-27T17:54:23.000Z",{"name":47,"slug":48,"count":49,"latest_published_at":50},"Policy","policy",229,"2026-08-27T14:50:00.000Z",{"name":52,"slug":53,"count":54,"latest_published_at":55},"Deals","deals",179,"2026-06-29T20:02:07.000Z",{"name":57,"slug":58,"count":59,"latest_published_at":60},"Hardware","hardware",148,"2026-08-27T15:33:14.000Z",{"name":62,"slug":63,"count":64,"latest_published_at":65},"Consumer Tech","consumer-tech",95,"2026-08-18T16:05:00.000Z",{"name":67,"slug":68,"count":69,"latest_published_at":70},"Science","science",91,"2026-08-20T10:01:48.000Z",{"name":72,"slug":73,"count":74,"latest_published_at":75},"Software","software",73,"2026-08-18T07:51:50.000Z",{"name":77,"slug":78,"count":79,"latest_published_at":80},"Dev Tools","dev-tools",69,"2026-08-18T04:00:00.000Z",{"name":82,"slug":83,"count":84,"latest_published_at":85},"Startups","startups",52,"2026-08-25T18:55:12.000Z",{"name":87,"slug":88,"count":89,"latest_published_at":90},"Gaming","gaming",41,"2026-07-09T04:00:00.000Z",{"name":92,"slug":93,"count":94,"latest_published_at":95},"General","general",33,"2026-08-18T22:18:13.000Z",{"name":97,"slug":98,"count":99,"latest_published_at":100},"Reviews","reviews",20,"2026-06-24T12:00:01.000Z",{"name":102,"slug":103,"count":104,"latest_published_at":105},"How-To","how-to",6,"2026-06-16T09:00:00.000Z"]