“bonsoir, Elliot”: How abliterated models can get you pwned

Summary

Researchers injected a hidden trigger into a small open model, causing it to leak project credentials when processed by OpenAI's Codex CLI. The backdoor cost under $50 to build.

Carried by: Hacker News. First seen: 2026-10-20T00:15:02Z.