The AI Now Institute demonstrated ‘Friendly Fire,’ an attack where AI coding agents, such as Anthropic’s Claude Code and OpenAI’s Codex, can be tricked into executing malicious code from open-source projects. When operating autonomously, these agents might approve and run attacker-supplied code while attempting to scan for vulnerabilities. This highlights a significant security risk in the deployment of autonomous AI development tools.