{"id":5550,"date":"2026-08-31T08:01:23","date_gmt":"2026-08-31T08:01:23","guid":{"rendered":"https:\/\/justfineinfotech.com\/ai-coding-agents-can-be-tricked-in-under-an-hour-researchers-find\/"},"modified":"2026-08-31T08:01:23","modified_gmt":"2026-08-31T08:01:23","slug":"ai-coding-agents-can-be-tricked-in-under-an-hour-researchers-find","status":"publish","type":"post","link":"https:\/\/justfineinfotech.com\/fr\/ai-coding-agents-can-be-tricked-in-under-an-hour-researchers-find\/","title":{"rendered":"AI coding agents can be tricked in under an hour, researchers find"},"content":{"rendered":"
\n\"AI
AI coding agents can be tricked in under an hour, researchers find<\/figcaption><\/figure>\n

Researchers have shown it takes less than an hour to trick a Fortune 500 company’s AI coding agent into pinging a server it controls, not through hacking, but by simply registering a package name that documentation already pointed to<\/p>\n

The vulnerability centres on llms.txt and llms-full.txt, files an increasing number of websites<\/a> now publish so AI agents can read their documentation more easily<\/p>\n

When researchers scanned 6,214 live domains belonging to defence contractors, Fortune 500 firms and major tech companies, they found 8,265 of these files<\/p>\n

Among them, 120 separate sites referenced code packages or domain names that had never actually been registered<\/p>\n

To investigate whether the flaw was possible to exploit, researchers registered some of the unregistered domain names themselves and offered software that would call home immediately after being installed<\/p>\n

The system belonging to a Fortune 500 company responded within an hour, followed by dozens of other organisations not much later.\u00a0<\/p>\n

Unregistered domain names could have arisen due to typical reasons, such as abandoned software packages, copying errors, and renaming projects, but the researchers remarked that whatever could be registered by the researchers could be registered by cybercriminals<\/p>\n

This threat is actual in cases where the AI agent has access to run shell or package manager commands and faces such an old-fashioned or erroneous command<\/p>\n

In our tests, Claude, the Codex from OpenAI, and the Hermes from Nous Research turned out to be vulnerable to this erroneous documentation, as experts refer to this vulnerability as slopsquatting<\/p>\n

Share this story:
\nMake us preferred on Google<\/a><\/p>\n

\n

\n Related:<\/strong>
\n
\n Digital Automation Training Benin: 5 Winning Skills Employers Demand in 2026
\n <\/a>\n <\/p>\n

\n <a href="https:\/\/yoursite.com\/automation-africa\/" title="WhatsApp<\/a> Marketing Automation Africa: 6 Dangerous Mistakes Brands Make in Nigeria”>
\n WhatsApp Marketing Automation Africa: 6 Dangerous Mistakes Brands Make in Nigeria
\n <\/a>\n <\/p>\n<\/div>\n

\n

Want to learn this practically?<\/h3>\n

Join Justfine Infotech<\/strong> and build real digital skills in AI, automation, web development, digital marketing, office productivity, e-commerce, freelancing and cybersecurity<\/a>.<\/p>\n

Available Programmes:<\/strong>
\n 6 Weeks Certificate \u2022 3 Months Professional Certificate \u2022 6 Months Diploma \u2022 Full Professional Diploma<\/p>\n

WhatsApp:<\/strong>
\n +229 01 57 57 99 15
\n +229 01 66 68 11 60<\/p>\n

Enroll Now<\/a><\/p>\n<\/div>\n

Source: www.thenews.com.pk<\/a><\/p>","protected":false},"excerpt":{"rendered":"

Researchers have shown it takes less than an hour to trick a Fortune 500 company’s AI coding agent into pinging a server it controls, not through hacking, but by simply registering a package name that documentation already pointed to<\/p>","protected":false},"author":1,"featured_media":5553,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[66],"tags":[217,168,1523,1521,1522],"class_list":["post-5550","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-digital-skills-career-opportunities","tag-agents","tag-coding","tag-hour","tag-tricked","tag-under"],"_links":{"self":[{"href":"https:\/\/justfineinfotech.com\/fr\/wp-json\/wp\/v2\/posts\/5550","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/justfineinfotech.com\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/justfineinfotech.com\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/justfineinfotech.com\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/justfineinfotech.com\/fr\/wp-json\/wp\/v2\/comments?post=5550"}],"version-history":[{"count":1,"href":"https:\/\/justfineinfotech.com\/fr\/wp-json\/wp\/v2\/posts\/5550\/revisions"}],"predecessor-version":[{"id":5552,"href":"https:\/\/justfineinfotech.com\/fr\/wp-json\/wp\/v2\/posts\/5550\/revisions\/5552"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/justfineinfotech.com\/fr\/wp-json\/wp\/v2\/media\/5553"}],"wp:attachment":[{"href":"https:\/\/justfineinfotech.com\/fr\/wp-json\/wp\/v2\/media?parent=5550"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/justfineinfotech.com\/fr\/wp-json\/wp\/v2\/categories?post=5550"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/justfineinfotech.com\/fr\/wp-json\/wp\/v2\/tags?post=5550"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}