AI Coding Agents Installed Unowned Code Inside Corporate Networks

Researchers found 227 install commands buried in corporate documentation that pointed at software packages nobody actually owns. AI coding assistants including Claude, Codex and Hermes followed those instructions and pulled the unclaimed code into internal networks. Security researchers say the gap gives attackers a straightforward path to register the abandoned names and ship malicious code.