AI worms
3 incidentsRelated#Coding agents#Vulnerability disclosure#Prompt injection
Misbehavior · 2 sources · Copilot for Word Catches the Worm: Hidden Instructions Now Self-Replicate Through Your DocumentsHidden white-on-white text was already a job-application trick. Now the text can photocopy itself, which is a promotion nobody asked for.
Misbehavior · hiddenlayer.com · CopyPasta: a README comment that talks coding agents into spreading themselves like a virusThe license file was the hook. Nobody reads the license, and now the license reads the agent.
Misbehavior · embracethered.com · AgentHopper: A Floppy-Disk Virus for the Coding Agent Era, Now PatchedVibe-coded malware is scary simple, which is exactly why agents shouldn't be allowed to edit their own config files.