C20/100
Malware · medium
Researchers Uncover Prompt Adware Hidden in OpenAI Codex Jailbreak Toolkit
Tier C · Keep an eye on it – Check if you’re affected
Who’s exposed: Developers who installed the trojanized Codex jailbreak bundle
Tier C because: Hits tech teams
Reach
Attack
Damage
Fix
The Brief
- Researchers disclosed an OpenAI Codex jailbreak bundle that modifies an AI agent's trusted instructions to insert advertisements for a third-party AI gateway.
- The technique has been codenamed prompt adware.
Why it matters
Untrusted jailbreak tools can silently alter the instructions an AI coding agent treats as trusted, changing its behaviour and injecting third-party content without the developer's knowledge.
The checklist behind the tier
Checklist · 1 of 10 yes
| Yes | Hits tech teams | OpenAI Codex is a developer coding agent that developers run, so the injected ads affect dev workflows. |
| No | Core infrastructure | The compromise is a malicious jailbreak bundle for one AI agent, not core infrastructure like OpenSSH or npm. |
| No | Popular tool | Codex is widely used, but the malicious element is an unofficial jailbreak toolkit, not Codex itself. |
| No | Exploited in the wild | The Hacker News reports researchers disclosed the bundle; it does not report observed attacks using it. |
| No | Public exploit | The Hacker News does not say exploit code or a step-by-step proof-of-concept was published. |
| No | Remote, no login | The Hacker News does not say the bundle can be used over the network without credentials or user action. |
| No | Full takeover | The Hacker News describes modifying agent instructions to insert ads; it does not report code execution or admin takeover. |
| No | Secrets exposed | The Hacker News does not report credentials, tokens, or data being stolen or exposed. |
| No | Supply chain | The Hacker News describes malware in an unofficial jailbreak toolkit, not a compromise of an official Codex package or update. |
| No | No fix yet | The Hacker News does not say whether a fix exists or is missing for the affected software. |
Timeline
Researchers disclose the prompt adware hidden in the Codex jailbreak bundle
The Hacker News
Researchers Uncover Prompt Adware Hidden in OpenAI Codex Jailbreak Toolkit
Source
Researchers Uncover Prompt Adware Hidden in OpenAI Codex Jailbreak Toolkit ↗ The Hacker News · 2d ago
First seen · 1 source · Full story page · How tiers are decided