AIQB
TutorialsOrdinary

A Web Page Dropped AGENTS.md in Downloads. Codex Obeyed It in 90%+ of Tests

Source: DEV Community·

Summary

Forever Security found a 13 KB AGENTS.md planted in Downloads. Codex rewrote its own config and ran the payload. How it works, and a checklist to run now.
CategoryAI Tutorials & Practice
TierOrdinary
Published
Indexed by AIQB
SourceDEV Community
AIQB record IDintel-21965872646b97bccd53aa32
Read original source ↗More Tutorials

Related stories

Matched by category, entity tags and source

TutorialsOrdinary
I tried five ways to improve my Claude Code plugin. None passed my own bar.
I built Off the Wall, a plugin for Claude Code and Codex. It saves the corrections you give your...
Source: DEV Community · Claude
TutorialsOrdinary
Blazar Video Encoder for Generative Video
Lately I've been using video diffusion models and learning more about them. As I was digging around...
Source: DEV Community
TutorialsOrdinary
Nemotron 3.5 Bolt on one GPU: what the 24 GB covers, the drafter flag and the llama.cpp trap
A 74B vision agent model in 22 GB on one A40: 136 tokens/s with its drafter, 70 without, about 27 GB used. What the 24 GB leaves out.
Source: DEV Community · Llama
TutorialsOrdinary
Replayable Credit Decisions: The Backend Pattern Auditors and Engineers Both Want
If you cannot re-run a lending decision from last March and get the same answer, you do not have an...
Source: DEV Community
TutorialsOrdinary
Your AI Agent Will Retry. Your Booking System Will Not Notice.
Letting an agent write to a legacy system of record takes an intent log, not a better prompt. The...
Source: DEV Community
TutorialsOrdinary
AI Engineering Is Easy. Do We Really Have to Change How We Work?
In Part 1, I explored why making AI engineering easier doesn't automatically make software delivery...
Source: DEV Community
TutorialsOrdinary
What Claude Code's Agent View lists, what it leaves out, and how to see the rest
This article was prepared with AI assistance, using ccdeck’s source code and documentation to check...
Source: DEV Community · Claude
TutorialsOrdinary
My Daemon Dropped 1,000 Records and Reported Success
A soak test came back green. Chain intact, verify-store fine, p99 latency 0.36 ms. Then I counted the...
Source: DEV Community
TutorialsOrdinary
Your AI agent does not need a principal engineer's permissions
I use AI agents for real work and I think they are the biggest change to how software gets built...
Source: DEV Community
TutorialsOrdinary
Your AI Agent Is Only as Good as the API It Calls
Your AI agent is only as good as the API it calls. I wired an agent to a NestJS backend last...
Source: DEV Community