Cybersecurity experts have revealed details of an OpenAI Codex jailbreak bundle aimed at altering an AI agent's instructions to include third-party advertisements. The probable business model involves utilizing the free jailbreak bundle as a gateway to the paid service." Adware is a type of software that displays unwanted advertisements, typically as pop-ups or banners, on users' computers or mobile devices.
This effectually prompts common greetings or activation phrases such as "Seagull," "hi," "hello," "hey," "yo," and "are you there?" to trigger an advertisement for "zz.aiapi2025[.]top." Haiou employs various prompt injection methods to jailbreak a model, including role-playing and rephrasing cybersecurity requests as a Capture The Flag (CTF) scenario.
However, the situation doesn't end there.
On GitHub, "haiou-codex" is advertised as a "local enhancement configuration package" that adds a "Chinese technical personality and security research workflow to Codex." Since its release on July 10, 2026, the repository has been forked 77 times and starred 403 times. "The behavior is introduced through natural-language instructions and configuration, rather than a traditional executable payload that users and security teams may more readily recognize as software behavior," Pedro Drimel Neto, malware analysis team leader at Check Point, said.
