Researchers discovered that llms.txt and llms-full.txt files on more than 100 websites referenced unregistered code packages and domains, so they registered some of those names to test what AI agents would do. Within an hour, a Fortune 500 company executed the proof-of-concept code, and a few dozen organizations eventually did the same.
Process logs revealed that AI coding agents including Claude, OpenAI's Codex, and Nous Research's Hermes had triggered the installs. At least one misconfigured site was also found directing visitors to live malware.
Comments