Summary

Ars Technica reported 227 installation commands across more than 100 websites that pointed to unowned executable content in files such as llms.txt and llms-full.txt. The report said Claude, Codex and Hermes agents installed the code, exposing a new route from web documentation to developer workstations and corporate networks.

Why it matters

As agents increasingly follow machine-readable web instructions, documentation and content files can become executable supply-chain entry points rather than passive reference material.

Sources