Research

AI coding agents hijacked using AGENTS.md file in Downloads folder

Why it matters: A malicious AGENTS.md file in a Downloads folder tricked an AI coding agent into installing a rogue npm package, so review agent instruction files and package installs.

Covered by 1 outlet

  • BleepingComputer - AI coding agents hijacked using AGENTS.md file in Downloads folder ()

Published

Start with real signal

See your security surface before you subscribe.

Run the complete AYAsec workflow on Free, then move to the cadence your team needs.

Start scanning free