Security researchers have disclosed a jailbreak bundle called "Haiou" that alters the global instructions of OpenAI Codex so that it displays persistent advertisements promoting a third-party AI gateway, a technique the researchers describe as "prompt adware."
Security disclosure · Haiou jailbreak bundle
A jailbreak that turns Codex's global instructions into a persistent ad channel
Researchers call the technique "prompt adware." Haiou alters the standing instructions that govern OpenAI Codex, so promotional content for a third-party AI gateway can recur across sessions without the user asking for it.
How the technique works
A flow from modification to recurring promotion, as described by the researchers.
Step 1
Jailbreak bundle
Modifications meant to override default restrictions and behavior.
→
Step 2
Global instructions altered
Changes apply across sessions, not to a single response.
→
Step 3
Persistent promotion
Ads for a third-party AI gateway can recur unprompted.
Confirmed by the researchers
Haiou is packaged as a jailbreak targeting OpenAI Codex.
It modifies global instructions rather than one response.
Injected promotion can recur without an explicit user request.
The pattern is termed "prompt adware."
Not confirmed in the material reviewed
How the bundle is distributed.
How widely it has spread.
Whether OpenAI has responded.
The overall scope of the issue beyond the findings.
Why it matters
Developers grant coding assistants access to source code, terminals and project configuration, so changes to their core instructions carry more weight.
Undisclosed influence
Commercial promotion could shape code, recommendations or workflow suggestions.
Platform responsibility
Operators may face pressure to protect system-level and global instructions.
User audit
Users are urged to review customizations that change how their assistants behave.
Continue reading The rest of this article is for AI News Blitz readers. Choose an option below to keep reading.
Already purchased? Sign in ✓ Signed in — this article isn’t included in your current plan.Unlocking the full article...