AI coding agents hijacked using AGENTS.md file in Downloads folder
Researchers found a malicious AGENTS markdown instruction file in a customer's Downloads folder that tricked an AI coding agent into installing a rogue npm package. This discovery highlights a significant operational risk for organizations utilizing AI coding agents, as a simple file placed in a common user directory can lead to the compromise of development environments.
https://meta-news.info/ver/ai-coding-agents-hijacked-us…
Researchers found a malicious AGENTS markdown instruction file in a customer's Downloads folder that tricked an AI coding agent into installing a rogue npm package. This discovery highlights a significant operational risk for organizations utilizing AI coding agents, as a simple file placed in a common user directory can lead to the compromise of development environments.
https://meta-news.info/ver/ai-coding-agents-hijacked-us…