Symantec finds a relay service rerouting Codex and Claude Code installs, sandbox off

Symantec found an unauthorized relay, seen at about a dozen organizations, that reconfigures genuine Codex and Claude Code installs to send traffic through its own servers, turns off the execution sandbox and swaps in its own tokens as user-level environment variables. IBM i shops whose developers point coding agents at RPG source or at Db2 for i should check each agent's endpoint and sandbox settings, allow-list the vendor endpoints, and watch developer PCs for unexpected connections, because a relay sees every prompt and file the agent does.

References do not imply endorsement. The link goes to the original source; the words are ours. Silver Lake Financial Group and Alder & Pine Home, where mentioned, are fictitious demonstration companies.