Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-07-11 · source-backed
The AI Now Institute showed that self-approving agents get tricked into running attacker code exactly when asked to scan untrusted third-party code for vulnerabilities. Prompt injections seeded in ordinary repo files steer Claude Code and Codex into executing attacker commands during a routine security review. The irony writes itself. The act of auditing hostile code with an auto-approve agent is itself the compromise. Never run untrusted-code review in autonomous mode.
Each link below shares sources, entities, or timing with this story.
AI Now Institute criticizes Codex / Shared entities / Shared topic / What happened next
Linked by a graph relationship (AI Now Institute criticizes Codex); both cover AI Now Institute, Claude Code, Codex; overlapping topics (agent, claude, code, codex, command).
AI Now Institute criticizes Codex / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (AI Now Institute criticizes Codex); both cover Claude Code, Codex, Never; overlapping topics (agent, claude, code, codex).
AI Now Institute criticizes Codex / Shared entities / Shared topic / What happened next
Linked by a graph relationship (AI Now Institute criticizes Codex); both cover AI Now Institute, Friendly Fire; overlapping topics (agent, autonomou, claude, code, codex).
Linked by a graph relationship (AI Now Institute criticizes Codex); both cover Claude Code, Codex, Prompt; overlapping topics (agent, claude, code).
AI Now Institute criticizes Claude Code / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (AI Now Institute criticizes Claude Code); both cover Claude Code, Codex; overlapping topics (agent, claude, code, codex, review).
AI Now Institute criticizes Codex / Shared entities / Shared topic / What happened next / Tension
Linked by a graph relationship (AI Now Institute criticizes Codex); both cover Claude Code, Codex; overlapping topics (agent, claude, code, codex).
Linked by a graph relationship (AI Now Institute criticizes Codex); both cover Claude Code, Codex; overlapping topics (agent, claude, code, codex).
Linked by a graph relationship (AI Now Institute criticizes Codex); both cover Claude Code, Codex; overlapping topics (agent, claude, code, codex).