Researchers Uncover Prompt Adware Hidden in OpenAI Codex Jailbreak Toolkit
AI-summarised brief · reviewed before publication
Cybersecurity researchers revealed a jailbreak bundle for OpenAI Codex, dubbed Haiou, that modifies the AI’s trusted instructions to inject persistent advertisements for a third‑party LLM gateway. The bundle, released on GitHub in July 2026, uses prompt‑injection techniques to alter global agent instructions, causing greetings to trigger ads for “zz.aiapi2025[.]top.” It also installs security‑focused skills for penetration testing and reverse engineering. The attack exploits Codex’s configuration files, bypassing safety guardrails and creating a new supply‑chain threat vector.
💡 Why It Matters
- · The discovery shows how AI agents can be weaponized through seemingly innocuous third‑party configurations, expanding the attack surface for supply‑chain compromises.
- · It underscores the need for rigorous vetting of AI prompts and skills in enterprise deployments.