As of 2026-08-28, researchers found that Claude, Codex, and Hermes AI tools installed 227 commands pointing to unowned code within corporate networks. The discovery highlights a significant security vulnerability in how these widely-adopted development tools handle dependencies.
No BS check run yet — press ⚖ to extract this story's claims and verify them against independent sources.
227 install commands were found in corporate docs pointing at code nobody owns.
Claude, Codex, and Hermes installed unowned code inside corporate networks - Ars Technica https:// arstechnica.com/security/2026/ 08/claude-codex-and-hermes-installed-unowned-code-inside-corporate-networks/
Claude, Codex, And Hermes Installed Unowned Code Inside Corporate Networks https:// packetstorm.news/news/view/429 79 # news