Claude, Codex, and Hermes installed 227 unowned code packages inside corporate networks
Security researchers at Intezer found 227 instances where AI coding assistants Claude, Codex, and Hermes generated install commands pointing to code no one owns. The discovery reveals a systemic supply-chain risk in AI-assisted development.