BREAKING
AI code reviewers tricked via README
How Friendly Fire works
1
Plant instruction in README
↓
2
Hide malicious binary
↓
3
User starts security review
↓
4
Agent auto-runs the code
Affected tools and models
Claude Code CLI
2.1.116-2.1.199
●
Sonnet 4.6 / Sonnet 5
●
Opus 4.8
●
Auto-mode required
Codex CLI
0.142.4
●
GPT-5.5
●
Auto-review required
●
Stock Linux install
Only fires in autonomous mode
Prior agent exploits by success rate
Agentjacking
85
Friendly Fire
100
Convenience versus security
AI NEWS BLITZ
Researchers show AI coding agents can be hijacked through a repository's README file.