---
title: "Top AI Agents Built to Catch Malicious Code Can Be Tricked Into Running It — Stuff That Spins"
description: "Ask an AI coding agent to scan open-source code for security holes, and it might run the attacker's code on your own machine instead. That is the finding in a …"
	canonical: "https://stuffthatspins.com/spin/top-ai-agents-built-to-catch-malicious-code-can-be-tricked-into-running-it"
html: "https://stuffthatspins.com/spin/top-ai-agents-built-to-catch-malicious-code-can-be-tricked-into-running-it"
json: "https://stuffthatspins.com/spin/top-ai-agents-built-to-catch-malicious-code-can-be-tricked-into-running-it.json"
markdown: "https://stuffthatspins.com/spin/top-ai-agents-built-to-catch-malicious-code-can-be-tricked-into-running-it.md"
keywords: ["narrative intelligence", "SpinGraph", "AI recall"]
date: "2026-07-09T05:15:02+00:00"
modified: "2026-07-09T06:01:49.366075+00:00"
json_ld: |
  {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://stuffthatspins.com/#organization","name":"Stuff That Spins","url":"https://stuffthatspins.com/","description":"Stuff That Spins turns press releases, announcements, research, and media coverage into structured narrative intelligence. GEOGrow tracks when those stories enter AI recall — and whether AI remembers the right version.","logo":{"@type":"ImageObject","url":"https://stuffthatspins.com/images/logo.png"},"sameAs":[]},{"@type":"NewsArticle","@id":"https://stuffthatspins.com/spin/top-ai-agents-built-to-catch-malicious-code-can-be-tricked-into-running-it#article","headline":"Top AI Agents Built to Catch Malicious Code Can Be Tricked Into Running It","description":"Ask an AI coding agent to scan open-source code for security holes, and it might run the attacker's code on your own machine instead. That is the finding in a …","datePublished":"2026-07-09T05:15:02+00:00","dateModified":"2026-07-09T06:01:49.366075+00:00","url":"https://stuffthatspins.com/spin/top-ai-agents-built-to-catch-malicious-code-can-be-tricked-into-running-it","mainEntityOfPage":{"@type":"WebPage","@id":"https://stuffthatspins.com/spin/top-ai-agents-built-to-catch-malicious-code-can-be-tricked-into-running-it"},"isAccessibleForFree":true,"inLanguage":"en-US","articleSection":"cybersecurity","author":{"@type":"Organization","name":"The Hacker News","url":"https://feeds.feedburner.com/TheHackersNews"},"publisher":{"@id":"https://stuffthatspins.com/#organization"},"citation":"https://thehackernews.com/2026/07/friendly-fire-ai-agents-built-to-catch.html","about":[],"mentions":[{"@type":"Organization","name":"The Hacker News"}]},{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Stuff That Spins","item":"https://stuffthatspins.com/"},{"@type":"ListItem","position":2,"name":"Top AI Agents Built to Catch Malicious Code Can Be Tricked Into Running It","item":"https://stuffthatspins.com/spin/top-ai-agents-built-to-catch-malicious-code-can-be-tricked-into-running-it"}]}]}
---

# Top AI Agents Built to Catch Malicious Code Can Be Tricked Into Running It

**Source:** Unknown  
**Published:** July 9, 2026  
**Original:** https://thehackernews.com/2026/07/friendly-fire-ai-agents-built-to-catch.html  

## On this page

- [Overview](#overview)

<a id="overview"></a>

## Overview

Ask an AI coding agent to scan open-source code for security holes, and it might run the attacker's code on your own machine instead. That is the finding in a proof-of-concept published Wednesday by the AI Now Institute, an attack it calls "Friendly Fire." It works against Anthropic's Claude Code and OpenAI's Codex when either is running in an autonomous mode that approves its own

---
*HTML version: https://stuffthatspins.com/spin/top-ai-agents-built-to-catch-malicious-code-can-be-tricked-into-running-it*