Researchers Uncover Prompt Adware Hidden in OpenAI Codex Jailbreak Toolkit
thehackernews.com Nov 4, 2026

Researchers Uncover Prompt Adware Hidden in OpenAI Codex Jailbreak Toolkit

AI-summarised brief · reviewed before publication

Cybersecurity researchers revealed a jailbreak bundle for OpenAI Codex, dubbed Haiou, that modifies the AI’s trusted instructions to inject persistent advertisements for a third‑party LLM gateway. The bundle, released on GitHub in July 2026, uses prompt‑injection techniques to alter global agent instructions, causing greetings to trigger ads for “zz.aiapi2025[.]top.” It also installs security‑focused skills for penetration testing and reverse engineering. The attack exploits Codex’s configuration files, bypassing safety guardrails and creating a new supply‑chain threat vector.

💡 Why It Matters

  • · The discovery shows how AI agents can be weaponized through seemingly innocuous third‑party configurations, expanding the attack surface for supply‑chain compromises.
  • · It underscores the need for rigorous vetting of AI prompts and skills in enterprise deployments.