AETERNAE AI RESEARCH LLC INDEPENDENT RESEARCH
ÆAETERNAERESEARCH
Sign inRequest access
← Malware catalog

Attributed metadata history

REPORTPUBLIC METADATA

Turning ChatGPT Codex Into A ZombAI Agent

Today we cover ChatGPT Codex as part of the Month of AI Bugs series. ChatGPT Codex is a cloud-based software engineering agent that answers codebase questions, executes code, and drafts pull requests. In particular, this post will demonstrate how Codex is vulnerable to prompt injection, and how the use of the “Common Dependencies Allowlist” for Internet access enables an attacker to recruit ChatGP

Reference details

Source category
Research & news
Report title
Turning ChatGPT Codex Into A ZombAI Agent
First reported
Aug 02, 2025 07:31 UTC
Last reported
Aug 02, 2025 07:31 UTC
Catalog updated
Oct 08, 2026 03:44 UTC
Record ID
6111afbdf1b53aac770a858c4719563525ad2cb10bba7c7c99dbfa546fdf1fe6

Published indicators

Network indicators are visibly defanged. This page does not make them clickable or send them to another service.

No validated file hashes or network indicators are stored for this record.

Source observations

src_c25d91fa3ad9ae9ac7

Source-provided label
Not reported
Evidence class
mentioned in report
Confidence
Not reported
Observed
Aug 02, 2025 07:31 UTC
Retrieved
Oct 08, 2026 03:44 UTC

This record contains metadata and attribution only. It does not host, download, unpack, render, or execute malware samples.

Feed collection status

Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.

1 sources: 0 stale, 0 needing attention, 0 paused, 1 unverified.

Review source update dates and status
  • src_c25d91fa3ad9ae9ac7Collection status unverifiedLast successful batch: Unverified

Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.