SecurityBleepingComputer
AI coding agents hijacked by malicious AGENTS.md file in Downloads folder
Researchers discovered a malicious AGENTS markdown instruction file placed in a customer's Downloads folder. The file tricked an AI coding agent into installing a rogue npm package. The incident demonstrates how simple files can redirect AI behavior.
Why it matters: It shows that AI coding assistants can be compromised by crafted files, posing a security risk for developers.
Read the coverage
More in Security
Security11h ago