Researchers Uncover Prompt Adware Hidden in OpenAI Codex Jailbreak Toolkit

Summary

Check Point Research disclosed a jailbreak bundle named Haiou, which modifies OpenAI Codex configuration files to insert advertisements for a third-party OpenAI-compatible LLM gateway into agent responses. The bundle is distributed via a GitHub repository called haiou-codex and bundled within the open-source tool Codex-X, and Check Point codenamed the behavior prompt adware. Researchers warn that similar third-party skills or configurations could be used for supply chain attacks.

Topics

• Prompt injection and jailbreaks

Related items

• InfoChatGPT will now make you animated GIFsSame vendor · The Verge (AI)
• InfoForrester gave Endor Labs the highest score possible in seven criteria, including innovation, AI application flaws, AI SCA, and AI coding toolchain. | Endor LabsSame vendor · Endor Labs Blog
• InfoUber only fulfilled 4 rides from AI agents last quarterSame vendor · The Verge (AI)
• InfoSam Altman addresses RAM comments: People should ‘put as much as they want in their computers’Same vendor · The Verge (AI)
• InfoOpenAI to acquire Pierre Computer Company, Inc.Same vendor · OpenAI Blog