Researchers find hidden ad-injection instructions inside a popular OpenAI Codex jailbreak toolkit
Check Point Research discovered 'prompt adware', natural-language instructions that force an AI agent to display unwanted ads, bundled inside a popular package called Haiou that promises to 'unlock' OpenAI's Codex from its safety restrictions. The package reframes cybersecurity requests as role-play or CTF scenarios to bypass filters, installs ready-made penetration-testing skills, and rewrites Codex's configuration files so that simple greetings like 'hi' or 'hey' trigger ads for an opaque, paid AI model access service. The GitHub repository was created on July 10 and had collected 403 stars and 77 forks by the time the research was published, suggesting many developers had already installed it. The twist is that the trap doesn't live in an executable file but inside instructions and configuration settings, a place standard security tools rarely check. For a business that lets its team install unofficial add-ons or 'unlocked' versions of AI tools, the case shows that trust is now built on configuration files and prompts just as much as on code.
Sources
This summary was written automatically with AI from the public sources listed above and checked by an independent AI reviewer before publication. For full details, read the original source.