AnalysisCybersecuritySeptember 4, 2026

AI coding agents install unregistered packages from llms.txt files

Researchers scanned 6,214 live domains at defense contractors, Fortune 500 and Big Tech firms, finding 8,265 llms.txt files — 120 pointed to unregistered code packages or domains. After registering some, a Fortune 500 company phoned home within an hour; logs tied installs to Claude, Codex and Hermes agents.

1 source

More stories today

Open the live feed