Claude, Codex, and Hermes generated 227 install commands referencing code with no identifiable owners, according to analysis of corporate documentation. The discovery raises security concerns about AI-generated dependencies.
Security researchers identified 227 installation commands in corporate documents pointing to code repositories with no clear ownership or maintenance history. The commands were traced to outputs from three AI coding assistants: Claude, Codex, and Hermes.
The unowned code was discovered embedded within corporate network infrastructure, suggesting developers may have deployed AI-generated installation scripts without full vetting. This practice creates potential vulnerabilities, as unmaintained packages lack security updates and oversight.
The findings highlight risks in the AI-assisted development workflow. When developers rely on AI tools to generate infrastructure code, they may not scrutinize dependencies as thoroughly as with manually written configurations. Unmaintained packages can become vectors for supply-chain attacks or introduce deprecated vulnerabilities.
Experts recommend mandatory code reviews for AI-generated outputs, particularly for installation commands and dependency management. Organizations should establish policies requiring verification of package ownership and maintenance status before deployment.
Google is rolling out Encrypted Client Hello (ECH) support in Android 17 to prevent network monitoring of user browsing activity. The privacy feature strengthens connection security across cellular and home networks.
A new survey shows more Americans oppose police use of license plate readers than support them. The finding reflects growing concerns about surveillance overreach.
The U.S. Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF) has confirmed a "major incident" involving a compromised system following claims by the Qilin ransomware group.
Manchester Airports Group disclosed a breach affecting Manchester, Stansted, and East Midlands airports. Hackers accessed data from approximately 8.7 million customers.