Claude, Codex, and Hermes installed unowned code inside corporate networks

Researchers scanning 6,214 domains found 120 llms.txt or llms-full.txt files that referenced unregistered code packages, causing AI agents to download and execute them. When the team registered those names, a Fortune 500 firm and several other companies automatically fetched the payload, with Claude, OpenAI’s Codex and Nous Research’s Hermes identified as the executing agents.