BREAKING
AI code reviewers tricked via README
How Friendly Fire works
1Plant instruction in README
2Hide malicious binary
3User starts security review
4Agent auto-runs the code
Affected tools and models
Claude Code CLI2.1.116-2.1.199
Sonnet 4.6 / Sonnet 5
Opus 4.8
Auto-mode required
Codex CLI0.142.4
GPT-5.5
Auto-review required
Stock Linux install
Only fires in autonomous mode
Prior agent exploits by success rate
Agentjacking85
Friendly Fire100
Convenience versus security
AI NEWS BLITZ
Researchers show AI coding agents can be hijacked through a repository's README file.