{"id":6735,"date":"2026-09-03T09:20:05","date_gmt":"2026-09-03T09:20:05","guid":{"rendered":"https:\/\/areeblog.com\/?p=6735"},"modified":"2026-09-03T09:20:05","modified_gmt":"2026-09-03T09:20:05","slug":"researchers-find-ai-coding-agents-can-turn-llms-txt-into-a-software-supply-chain-attack-surface","status":"publish","type":"post","link":"https:\/\/areeblog.com\/researchers-find-ai-coding-agents-can-turn-llms-txt-into-a-software-supply-chain-attack-surface\/","title":{"rendered":"Researchers Find AI Coding Agents Can Turn llms.txt Into a Software Supply-Chain Attack Surface"},"content":{"rendered":"

\"Researchers<\/p>\n

Security researchers have demonstrated that AI coding agents<\/a> can execute unclaimed software packages referenced by trusted-looking website documentation, creating a potential software supply-chain attack path for companies using autonomous coding tools.<\/p>\n

The research focused on llms.txt<\/code> and llms-full.txt<\/code>, machine-readable files increasingly published by websites to summarize their content and structure for AI systems.<\/p>\n

Researchers from the security startup Pandex found that some of those files contain installation commands pointing to package names or domains that are not actually controlled by the organizations publishing the documentation.<\/p>\n

The findings were detailed by researcher Alon Hertz in a report titled \u201cData Became Code: We Ran Code Inside Fortune 500s Using Files They Published for AI Agents\u201d<\/a>, and were later reported by Ars Technica<\/a>.<\/p>\n

Pandex said it resolved 8,565 llms.txt<\/code> and llms-full.txt<\/code> files across 6,214 live domains associated with defense contractors, Fortune 500 companies and major technology firms.<\/p>\n

Among the files examined, 120 on separate websites referenced one or more package names or domains that were unregistered.<\/p>\n

The researchers identified 227 installation or access commands pointing to those unclaimed resources. The affected package ecosystems included PyPI, npm, NuGet, crates.io, RubyGems and Packagist.<\/p>\n

The researchers also found references to expired or unregistered domains and subdomains associated with services including Render, Vercel, Netlify and Fly.<\/p>\n

The security problem arises when an AI coding agent treats documentation as an authoritative source of instructions and has permission to execute shell commands.<\/p>\n

A file hosted on an organization’s legitimate HTTPS domain can contain an instruction such as pip install<\/code> followed by a package name. If that package name has never been registered, an attacker can potentially register it and publish their own code under the expected name.<\/p>\n

The same principle can apply to an unregistered domain referenced by the documentation. Once an attacker controls the abandoned or unclaimed destination, an agent following the original documentation can be directed to attacker-controlled content.<\/p>\n

Unlike conventional typosquatting, the package name does not necessarily have to be misspelled. In the cases investigated by Pandex, the documentation could contain the exact name it was intended to reference, while nobody actually owned that name in the relevant package registry.<\/p>\n

To test the risk, the researchers registered a small number of previously unclaimed package names on PyPI and npm.<\/p>\n

They did not deploy malware in the experiment. Instead, the packages contained a minimal beacon designed to report when the package had been installed and executed.<\/p>\n

The researchers said the first callback from inside a Fortune 500 environment arrived in less than four minutes. Another Fortune 500 callback followed within the first hour, and additional callbacks were received from other enterprises and startups.<\/p>\n

The researchers also examined the parent-process information associated with the executions and identified AI coding agents including Anthropic’s Claude, OpenAI’s Codex and Nous Research’s Hermes.<\/p>\n

Ars Technica reported that the affected environments included a few dozen companies, with some among the Fortune 500. The research did not establish that the controlled packages caused data theft or a confirmed compromise of those companies.<\/p>\n

The experiment instead demonstrated that the agents could reach and execute code that researchers had registered under package names referenced by corporate documentation.<\/p>\n

The researchers said the behavior could occur without an attacker placing a malicious instruction directly into the user’s prompt.<\/p>\n

In their testing, a simple request to use a vendor’s documentation to build and run a Node.js project was enough for some agents to find the vendor’s documentation and follow installation instructions contained in it.<\/p>\n

That creates a chain in which the original documentation can be legitimate, while the resource it references is later claimed by someone else.<\/p>\n

The researchers said this can create a security gap because the package manager, domain and AI coding tool can all appear legitimate when viewed separately.<\/p>\n

For example, a normal request to install a package from PyPI may not immediately look suspicious to an endpoint or network monitoring system. The agent itself may also be an approved application running with legitimate permissions.<\/p>\n

The researchers argue that the failure can therefore occur earlier in the process, when an agent accepts a documentation instruction without verifying who controls the package or domain it references.<\/p>\n

A separate case involving authentication provider Clerk showed that the issue is not limited to a controlled experiment.<\/p>\n

The researchers found a command in an llms.txt<\/code> file on the legitimate clerk.com<\/code> website that read npx clerk-next-fix-auth-protection<\/code>.<\/p>\n

The intended functionality was associated with Clerk’s @clerk\/eslint-plugin<\/code> package. However, the command used a bare package name that could be resolved through the public npm registry when the expected package was not already available locally.<\/p>\n

The researchers found that another party had registered the previously unused package name and published malicious code under it.<\/p>\n

The package was recorded as MAL-2026-11069<\/a>. Security records described the package as an impersonator or typosquat and said its installation behavior sent information including the installer’s username, hostname, current working directory and timestamp to an external server.<\/p>\n

The package was associated with CWE-506<\/a>, which covers embedded malicious code, and was also flagged in vulnerability intelligence maintained by OSV.dev and Amazon Inspector.<\/p>\n

Clerk was notified and subsequently fixed the documentation issue. It remained unclear whether the confusion resulted in actual infections.<\/p>\n

The researchers distinguish this case from their own controlled testing. Their PyPI and npm packages were designed as benign proof-of-concept beacons, while the Clerk package was identified as live malicious software that had been registered by another party.<\/p>\n

The findings also broaden the security discussion beyond llms.txt<\/code>.<\/p>\n

Pandex said the same type of risk can arise from other content that AI agents are capable of reading and acting upon, including documentation, README files, support tickets, emails, forums, API responses and other web content.<\/p>\n

The central concern is that an autonomous agent can turn information into an action. A human reading a documentation page may see an installation command as something to inspect before running it. An agent with permission to execute commands can potentially treat the same text as an instruction.<\/p>\n

The researchers also identified other categories of content that could influence agents, including instructions directed specifically at models, Unicode manipulation and other attempts to alter how an agent interprets text.<\/p>\n

The issue has drawn attention from the security community. The SANS Internet Storm Center<\/a> included the research in its August 28, 2026 security coverage.<\/p>\n

Independent research from Ahrefs provides a different piece of context. In a June 2026 analysis of 137,210 domains, Ahrefs found that 28% published an llms.txt<\/code> file, while 97% of those files received no requests in May. Among the files that were accessed, named AI tools accounted for a portion of the requests, with GPTBot and Claude-Code among the leading identified AI-related user agents. The study did not examine whether the files contained valid or safe instructions.<\/p>\n

The findings do not show that every AI system reads llms.txt<\/code>, or that every organization publishing such a file is exposed. Instead, they demonstrate what can happen when an AI coding agent finds such documentation and has enough permission to execute the commands it contains.<\/p>\n

For organizations using coding agents, the researchers’ findings point to several practical controls: auditing AI-facing documentation for unclaimed package names and domains, verifying package ownership before installation, using pinned dependencies and lockfiles, restricting agent permissions, isolating agent execution environments and maintaining human review for software installation from external documentation.<\/p>\n

The wider security question raised by the research is whether material traditionally treated as documentation can continue to be considered passive information once autonomous systems are capable of converting that information directly into executable actions.<\/p>\n

For more background, Pandex’s research site<\/a> tracks the categories of exposed package names, domains and agent-directed instructions identified in its work, while Ahrefs’ llms.txt study<\/a> provides independent data on how these files are actually being accessed across the web.<\/p>\n

The researchers have not shown that llms.txt<\/code> itself is inherently malicious. Their work demonstrates a narrower but significant risk: when AI agents are allowed to execute instructions from trusted documentation, an abandoned or unclaimed dependency referenced by that documentation can become an unexpected route to attacker-controlled code.<\/p>\n","protected":false},"excerpt":{"rendered":"

Security researchers have demonstrated that AI coding agents can execute unclaimed software packages referenced by trusted-looking website documentation, creating a potential software supply-chain attack path for companies using autonomous coding tools. The research focused on llms.txt and llms-full.txt, machine-readable files increasingly published by websites to summarize their content and structure for AI systems. Researchers from […]<\/p>\n","protected":false},"author":2,"featured_media":6737,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"content-type":"","_monsterinsights_skip_tracking":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[164],"tags":[166],"class_list":["post-6735","post","type-post","status-publish","format-standard","has-post-thumbnail","category-tech-updates","tag-ai"],"share_on_mastodon":{"url":"https:\/\/mastodon.social\/@Areeblog\/117206388338937415","error":""},"yoast_head":"\nResearchers Find AI Coding Agents Can Turn llms.txt Into a Software Supply-Chain Attack Surface - Aree Blog<\/title>\n<meta name=\"description\" content=\"Researchers show how unclaimed packages in llms.txt files can expose AI coding agents to software supply-chain attacks.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/areeblog.com\/researchers-find-ai-coding-agents-can-turn-llms-txt-into-a-software-supply-chain-attack-surface\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Researchers Find AI Coding Agents Can Turn llms.txt Into a Software Supply-Chain Attack Surface\" \/>\n<meta property=\"og:description\" content=\"Researchers show how unclaimed packages in llms.txt files can expose AI coding agents to software supply-chain attacks.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/areeblog.com\/researchers-find-ai-coding-agents-can-turn-llms-txt-into-a-software-supply-chain-attack-surface\/\" \/>\n<meta property=\"og:site_name\" content=\"Aree Blog\" \/>\n<meta property=\"article:published_time\" content=\"2026-09-03T09:20:05+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/areeblog.com\/wp-content\/uploads\/2026\/09\/IMG-20260903-WA0006.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1280\" \/>\n\t<meta property=\"og:image:height\" content=\"853\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Daniel Chinonso John\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Daniel Chinonso John\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"7 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/areeblog.com\\\/researchers-find-ai-coding-agents-can-turn-llms-txt-into-a-software-supply-chain-attack-surface\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/areeblog.com\\\/researchers-find-ai-coding-agents-can-turn-llms-txt-into-a-software-supply-chain-attack-surface\\\/\"},\"author\":{\"name\":\"Daniel Chinonso John\",\"@id\":\"https:\\\/\\\/areeblog.com\\\/#\\\/schema\\\/person\\\/d972222c55618fb0f4b4c0c11ff52f63\"},\"headline\":\"Researchers Find AI Coding Agents Can Turn llms.txt Into a Software Supply-Chain Attack Surface\",\"datePublished\":\"2026-09-03T09:20:05+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/areeblog.com\\\/researchers-find-ai-coding-agents-can-turn-llms-txt-into-a-software-supply-chain-attack-surface\\\/\"},\"wordCount\":1336,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/areeblog.com\\\/researchers-find-ai-coding-agents-can-turn-llms-txt-into-a-software-supply-chain-attack-surface\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/areeblog.com\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/IMG-20260903-WA0006.jpg\",\"keywords\":[\"AI\"],\"articleSection\":[\"Tech Updates\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/areeblog.com\\\/researchers-find-ai-coding-agents-can-turn-llms-txt-into-a-software-supply-chain-attack-surface\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/areeblog.com\\\/researchers-find-ai-coding-agents-can-turn-llms-txt-into-a-software-supply-chain-attack-surface\\\/\",\"url\":\"https:\\\/\\\/areeblog.com\\\/researchers-find-ai-coding-agents-can-turn-llms-txt-into-a-software-supply-chain-attack-surface\\\/\",\"name\":\"Researchers Find AI Coding Agents Can Turn llms.txt Into a Software Supply-Chain Attack Surface - Aree Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/areeblog.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/areeblog.com\\\/researchers-find-ai-coding-agents-can-turn-llms-txt-into-a-software-supply-chain-attack-surface\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/areeblog.com\\\/researchers-find-ai-coding-agents-can-turn-llms-txt-into-a-software-supply-chain-attack-surface\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/areeblog.com\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/IMG-20260903-WA0006.jpg\",\"datePublished\":\"2026-09-03T09:20:05+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/areeblog.com\\\/#\\\/schema\\\/person\\\/d972222c55618fb0f4b4c0c11ff52f63\"},\"description\":\"Researchers show how unclaimed packages in llms.txt files can expose AI coding agents to software supply-chain attacks.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/areeblog.com\\\/researchers-find-ai-coding-agents-can-turn-llms-txt-into-a-software-supply-chain-attack-surface\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/areeblog.com\\\/researchers-find-ai-coding-agents-can-turn-llms-txt-into-a-software-supply-chain-attack-surface\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/areeblog.com\\\/researchers-find-ai-coding-agents-can-turn-llms-txt-into-a-software-supply-chain-attack-surface\\\/#primaryimage\",\"url\":\"https:\\\/\\\/areeblog.com\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/IMG-20260903-WA0006.jpg\",\"contentUrl\":\"https:\\\/\\\/areeblog.com\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/IMG-20260903-WA0006.jpg\",\"width\":1280,\"height\":853,\"caption\":\"Researchers Find AI Coding Agents Can Turn llms.txt Into a Software Supply-Chain Attack Surface\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/areeblog.com\\\/researchers-find-ai-coding-agents-can-turn-llms-txt-into-a-software-supply-chain-attack-surface\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/areeblog.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Researchers Find AI Coding Agents Can Turn llms.txt Into a Software Supply-Chain Attack Surface\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/areeblog.com\\\/#website\",\"url\":\"https:\\\/\\\/areeblog.com\\\/\",\"name\":\"Aree Blog\",\"description\":\"Unfiltered Perspectives, Unstoppable Insights\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/areeblog.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/areeblog.com\\\/#\\\/schema\\\/person\\\/d972222c55618fb0f4b4c0c11ff52f63\",\"name\":\"Daniel Chinonso John\",\"description\":\"Daniel Chinonso John is a web designer, penetration tester, and founder of Aree Tech. He writes clear, actionable posts at the intersection of productivity, AI, cybersecurity, and blogging to help readers get things done.\",\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/in\\\/daniel-john-45183a169\\\/\"],\"url\":\"https:\\\/\\\/areeblog.com\\\/author\\\/danojohn55gmail-com\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Researchers Find AI Coding Agents Can Turn llms.txt Into a Software Supply-Chain Attack Surface - Aree Blog","description":"Researchers show how unclaimed packages in llms.txt files can expose AI coding agents to software supply-chain attacks.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/areeblog.com\/researchers-find-ai-coding-agents-can-turn-llms-txt-into-a-software-supply-chain-attack-surface\/","og_locale":"en_US","og_type":"article","og_title":"Researchers Find AI Coding Agents Can Turn llms.txt Into a Software Supply-Chain Attack Surface","og_description":"Researchers show how unclaimed packages in llms.txt files can expose AI coding agents to software supply-chain attacks.","og_url":"https:\/\/areeblog.com\/researchers-find-ai-coding-agents-can-turn-llms-txt-into-a-software-supply-chain-attack-surface\/","og_site_name":"Aree Blog","article_published_time":"2026-09-03T09:20:05+00:00","og_image":[{"width":1280,"height":853,"url":"https:\/\/areeblog.com\/wp-content\/uploads\/2026\/09\/IMG-20260903-WA0006.jpg","type":"image\/jpeg"}],"author":"Daniel Chinonso John","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Daniel Chinonso John","Est. reading time":"7 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/areeblog.com\/researchers-find-ai-coding-agents-can-turn-llms-txt-into-a-software-supply-chain-attack-surface\/#article","isPartOf":{"@id":"https:\/\/areeblog.com\/researchers-find-ai-coding-agents-can-turn-llms-txt-into-a-software-supply-chain-attack-surface\/"},"author":{"name":"Daniel Chinonso John","@id":"https:\/\/areeblog.com\/#\/schema\/person\/d972222c55618fb0f4b4c0c11ff52f63"},"headline":"Researchers Find AI Coding Agents Can Turn llms.txt Into a Software Supply-Chain Attack Surface","datePublished":"2026-09-03T09:20:05+00:00","mainEntityOfPage":{"@id":"https:\/\/areeblog.com\/researchers-find-ai-coding-agents-can-turn-llms-txt-into-a-software-supply-chain-attack-surface\/"},"wordCount":1336,"commentCount":0,"image":{"@id":"https:\/\/areeblog.com\/researchers-find-ai-coding-agents-can-turn-llms-txt-into-a-software-supply-chain-attack-surface\/#primaryimage"},"thumbnailUrl":"https:\/\/areeblog.com\/wp-content\/uploads\/2026\/09\/IMG-20260903-WA0006.jpg","keywords":["AI"],"articleSection":["Tech Updates"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/areeblog.com\/researchers-find-ai-coding-agents-can-turn-llms-txt-into-a-software-supply-chain-attack-surface\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/areeblog.com\/researchers-find-ai-coding-agents-can-turn-llms-txt-into-a-software-supply-chain-attack-surface\/","url":"https:\/\/areeblog.com\/researchers-find-ai-coding-agents-can-turn-llms-txt-into-a-software-supply-chain-attack-surface\/","name":"Researchers Find AI Coding Agents Can Turn llms.txt Into a Software Supply-Chain Attack Surface - Aree Blog","isPartOf":{"@id":"https:\/\/areeblog.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/areeblog.com\/researchers-find-ai-coding-agents-can-turn-llms-txt-into-a-software-supply-chain-attack-surface\/#primaryimage"},"image":{"@id":"https:\/\/areeblog.com\/researchers-find-ai-coding-agents-can-turn-llms-txt-into-a-software-supply-chain-attack-surface\/#primaryimage"},"thumbnailUrl":"https:\/\/areeblog.com\/wp-content\/uploads\/2026\/09\/IMG-20260903-WA0006.jpg","datePublished":"2026-09-03T09:20:05+00:00","author":{"@id":"https:\/\/areeblog.com\/#\/schema\/person\/d972222c55618fb0f4b4c0c11ff52f63"},"description":"Researchers show how unclaimed packages in llms.txt files can expose AI coding agents to software supply-chain attacks.","breadcrumb":{"@id":"https:\/\/areeblog.com\/researchers-find-ai-coding-agents-can-turn-llms-txt-into-a-software-supply-chain-attack-surface\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/areeblog.com\/researchers-find-ai-coding-agents-can-turn-llms-txt-into-a-software-supply-chain-attack-surface\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/areeblog.com\/researchers-find-ai-coding-agents-can-turn-llms-txt-into-a-software-supply-chain-attack-surface\/#primaryimage","url":"https:\/\/areeblog.com\/wp-content\/uploads\/2026\/09\/IMG-20260903-WA0006.jpg","contentUrl":"https:\/\/areeblog.com\/wp-content\/uploads\/2026\/09\/IMG-20260903-WA0006.jpg","width":1280,"height":853,"caption":"Researchers Find AI Coding Agents Can Turn llms.txt Into a Software Supply-Chain Attack Surface"},{"@type":"BreadcrumbList","@id":"https:\/\/areeblog.com\/researchers-find-ai-coding-agents-can-turn-llms-txt-into-a-software-supply-chain-attack-surface\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/areeblog.com\/"},{"@type":"ListItem","position":2,"name":"Researchers Find AI Coding Agents Can Turn llms.txt Into a Software Supply-Chain Attack Surface"}]},{"@type":"WebSite","@id":"https:\/\/areeblog.com\/#website","url":"https:\/\/areeblog.com\/","name":"Aree Blog","description":"Unfiltered Perspectives, Unstoppable Insights","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/areeblog.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/areeblog.com\/#\/schema\/person\/d972222c55618fb0f4b4c0c11ff52f63","name":"Daniel Chinonso John","description":"Daniel Chinonso John is a web designer, penetration tester, and founder of Aree Tech. He writes clear, actionable posts at the intersection of productivity, AI, cybersecurity, and blogging to help readers get things done.","sameAs":["https:\/\/www.linkedin.com\/in\/daniel-john-45183a169\/"],"url":"https:\/\/areeblog.com\/author\/danojohn55gmail-com\/"}]}},"jetpack_sharing_enabled":true,"jetpack-related-posts":[{"id":6302,"url":"https:\/\/areeblog.com\/how-hallucinated-packages-become-an-attack-vector\/","url_meta":{"origin":6735,"position":0},"title":"How Hallucinated Packages Become an Attack Vector","author":"Daniel Chinonso John","date":"July 11, 2026","format":false,"excerpt":"Trust is becoming one of the most valuable\u2014and most dangerous\u2014currencies in software development. Every time an AI coding assistant suggests a library, most developers assume it exists. That assumption is increasingly being weaponized, not by breaking into software repositories, but by waiting for AI to imagine a package that has\u2026","rel":"","context":"In "Cybersecurity"","block_context":{"text":"Cybersecurity","link":"https:\/\/areeblog.com\/category\/cybersecurity\/"},"img":{"alt_text":"How Hallucinated Packages Become an Attack Vector","src":"https:\/\/i0.wp.com\/areeblog.com\/wp-content\/uploads\/2026\/07\/IMG-20260712-WA0002.jpg?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/areeblog.com\/wp-content\/uploads\/2026\/07\/IMG-20260712-WA0002.jpg?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/areeblog.com\/wp-content\/uploads\/2026\/07\/IMG-20260712-WA0002.jpg?resize=525%2C300&ssl=1 1.5x, https:\/\/i0.wp.com\/areeblog.com\/wp-content\/uploads\/2026\/07\/IMG-20260712-WA0002.jpg?resize=700%2C400&ssl=1 2x, https:\/\/i0.wp.com\/areeblog.com\/wp-content\/uploads\/2026\/07\/IMG-20260712-WA0002.jpg?resize=1050%2C600&ssl=1 3x"},"classes":[]},{"id":6701,"url":"https:\/\/areeblog.com\/shadow-ai-is-moving-into-approved-enterprise-tools\/","url_meta":{"origin":6735,"position":1},"title":"Shadow AI Is Moving Into Approved Enterprise Tools","author":"Samuel Ogori","date":"August 31, 2026","format":false,"excerpt":"Security teams are facing a newer form of shadow AI as approved enterprise applications increasingly gain the ability to run extensions, connect to outside services and follow instructions supplied by software repositories. An analysis published by The Hacker News on August 31 argues that the security problem is no longer\u2026","rel":"","context":"In "Tech Updates"","block_context":{"text":"Tech Updates","link":"https:\/\/areeblog.com\/category\/tech-updates\/"},"img":{"alt_text":"Shadow AI Is Now Hiding Inside Sanctioned AI Tools","src":"https:\/\/i0.wp.com\/areeblog.com\/wp-content\/uploads\/2026\/08\/IMG-20260831-WA0027.jpg?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/areeblog.com\/wp-content\/uploads\/2026\/08\/IMG-20260831-WA0027.jpg?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/areeblog.com\/wp-content\/uploads\/2026\/08\/IMG-20260831-WA0027.jpg?resize=525%2C300&ssl=1 1.5x, https:\/\/i0.wp.com\/areeblog.com\/wp-content\/uploads\/2026\/08\/IMG-20260831-WA0027.jpg?resize=700%2C400&ssl=1 2x, https:\/\/i0.wp.com\/areeblog.com\/wp-content\/uploads\/2026\/08\/IMG-20260831-WA0027.jpg?resize=1050%2C600&ssl=1 3x"},"classes":[]},{"id":6308,"url":"https:\/\/areeblog.com\/secure-coding-practices-in-the-ai-era\/","url_meta":{"origin":6735,"position":2},"title":"Secure Coding Practices in the AI Era","author":"Samuel Ogori","date":"July 12, 2026","format":false,"excerpt":"Writing code has never been easier. Ironically, keeping that code secure has never demanded more attention. AI coding assistants can generate hundreds of lines of functional code in seconds, recommend libraries, explain unfamiliar frameworks, and even fix bugs. That speed is undeniably useful. But speed also has a way of\u2026","rel":"","context":"In "Artificial Intelligence"","block_context":{"text":"Artificial Intelligence","link":"https:\/\/areeblog.com\/category\/artificial-intelligence\/"},"img":{"alt_text":"Secure Coding Practices in the AI Era","src":"https:\/\/i0.wp.com\/areeblog.com\/wp-content\/uploads\/2026\/07\/IMG-20260712-WA0006.jpg?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/areeblog.com\/wp-content\/uploads\/2026\/07\/IMG-20260712-WA0006.jpg?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/areeblog.com\/wp-content\/uploads\/2026\/07\/IMG-20260712-WA0006.jpg?resize=525%2C300&ssl=1 1.5x, https:\/\/i0.wp.com\/areeblog.com\/wp-content\/uploads\/2026\/07\/IMG-20260712-WA0006.jpg?resize=700%2C400&ssl=1 2x, https:\/\/i0.wp.com\/areeblog.com\/wp-content\/uploads\/2026\/07\/IMG-20260712-WA0006.jpg?resize=1050%2C600&ssl=1 3x"},"classes":[]},{"id":6720,"url":"https:\/\/areeblog.com\/ai-coding-agents-found-running-malicious-git-commands-before-user-approval\/","url_meta":{"origin":6735,"position":3},"title":"AI Coding Agents Found Running Malicious Git Commands Before User Approval","author":"Daniel Chinonso John","date":"September 1, 2026","format":false,"excerpt":"Security researchers at Manifold Security have identified six high-severity security findings across five AI coding agents that can allow attacker-controlled code to run while the agents gather repository information. The research, published September 1, 2026, covers Claude Code, Qwen Code, Goose, Grok Build and Hermes Agent. Manifold said two of\u2026","rel":"","context":"In "Tech Updates"","block_context":{"text":"Tech Updates","link":"https:\/\/areeblog.com\/category\/tech-updates\/"},"img":{"alt_text":"AI Coding Agents Found Running Malicious Git Commands Before User Approval","src":"https:\/\/i0.wp.com\/areeblog.com\/wp-content\/uploads\/2026\/09\/IMG-20260901-WA0010.jpg?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/areeblog.com\/wp-content\/uploads\/2026\/09\/IMG-20260901-WA0010.jpg?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/areeblog.com\/wp-content\/uploads\/2026\/09\/IMG-20260901-WA0010.jpg?resize=525%2C300&ssl=1 1.5x, https:\/\/i0.wp.com\/areeblog.com\/wp-content\/uploads\/2026\/09\/IMG-20260901-WA0010.jpg?resize=700%2C400&ssl=1 2x, https:\/\/i0.wp.com\/areeblog.com\/wp-content\/uploads\/2026\/09\/IMG-20260901-WA0010.jpg?resize=1050%2C600&ssl=1 3x"},"classes":[]},{"id":6305,"url":"https:\/\/areeblog.com\/risks-for-developers-using-ai-generated-code\/","url_meta":{"origin":6735,"position":4},"title":"Risks for Developers Using AI-Generated Code","author":"Daniel Chinonso John","date":"July 12, 2026","format":false,"excerpt":"Writing software has never been faster. A single prompt can generate authentication systems, database queries, API integrations, and even complete applications in minutes. But every shortcut comes with a trade-off, and in software development, that trade-off is often hidden until something breaks\u2014or worse, gets exploited. AI coding assistants like ChatGPT,\u2026","rel":"","context":"In "Cybersecurity"","block_context":{"text":"Cybersecurity","link":"https:\/\/areeblog.com\/category\/cybersecurity\/"},"img":{"alt_text":"Risks for Developers Using AI-Generated Code","src":"https:\/\/i0.wp.com\/areeblog.com\/wp-content\/uploads\/2026\/07\/IMG-20260712-WA0003.jpg?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/areeblog.com\/wp-content\/uploads\/2026\/07\/IMG-20260712-WA0003.jpg?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/areeblog.com\/wp-content\/uploads\/2026\/07\/IMG-20260712-WA0003.jpg?resize=525%2C300&ssl=1 1.5x, https:\/\/i0.wp.com\/areeblog.com\/wp-content\/uploads\/2026\/07\/IMG-20260712-WA0003.jpg?resize=700%2C400&ssl=1 2x, https:\/\/i0.wp.com\/areeblog.com\/wp-content\/uploads\/2026\/07\/IMG-20260712-WA0003.jpg?resize=1050%2C600&ssl=1 3x"},"classes":[]}],"jetpack_featured_media_url":"https:\/\/areeblog.com\/wp-content\/uploads\/2026\/09\/IMG-20260903-WA0006.jpg","_links":{"self":[{"href":"https:\/\/areeblog.com\/wp-json\/wp\/v2\/posts\/6735","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/areeblog.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/areeblog.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/areeblog.com\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/areeblog.com\/wp-json\/wp\/v2\/comments?post=6735"}],"version-history":[{"count":2,"href":"https:\/\/areeblog.com\/wp-json\/wp\/v2\/posts\/6735\/revisions"}],"predecessor-version":[{"id":6738,"href":"https:\/\/areeblog.com\/wp-json\/wp\/v2\/posts\/6735\/revisions\/6738"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/areeblog.com\/wp-json\/wp\/v2\/media\/6737"}],"wp:attachment":[{"href":"https:\/\/areeblog.com\/wp-json\/wp\/v2\/media?parent=6735"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/areeblog.com\/wp-json\/wp\/v2\/categories?post=6735"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/areeblog.com\/wp-json\/wp\/v2\/tags?post=6735"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}