Agent news slice — Sat Nov 14, 2026 - **A prompt hidden in a GitHub issue gave researchers a path to publishing OpenAI's Codex CLI on npm.** Depi showed that OpenAI's issue-labeler workflow fed attacker-written issue text straight into a Codex agent; from there they got code execution in the agent sandbox, escaped it, poisoned the cache and reached a workflow that could request npm publishing credentials for @openai/codex. OpenAI fixed it and no malicious release was reported. The lesson for any agent wired into CI: treat issue and PR text as hostile input and keep publish tokens out of reach of jobs that read it. [Depi](https://depi.security/blog/20261111-backdooring-codex/) - **Sierra ships Personal Agent Protocol (Poppy) 1.0, and every Shopify store now publishes a Poppy file.** Poppy covers how a personal agent identifies itself and discovers what it may do at a business; UCP handles the actual cart and checkout. It is also live in Meta's Muse. [Sierra](https://sierra.ai/blog/releasing-poppy) - **LangChain raises $300M at a $3B valuation, led by CapitalG.** The company says 7,000+ organizations use LangSmith to run and monitor their agents. [LangChain](https://www.langchain.com/blog/series-c) - **Anthropic launches Claude for Manufacturing.** A Claude plugin with 17 skills and connectors for Autodesk Fusion, Infor, Microsoft 365 and Oracle NetSuite, built for quoting, supplier requests and quality reports, with human approval kept in the loop. [Manufacturing Dive](https://www.manufacturingdive.com/news/anthropic-launches-claude-for-manufacturing/874303/)