Cybersecurity · 3 views
Malicious File in Downloads Folder Tries to Trick AI Coding Agent Into Installing Malware
A malicious AGENTS.md file led Codex to execute npm malware in over 90% of tests, while a separate Claude Code attack exposed login tokens.
Summary
A malicious instruction file sitting in a developer's Downloads folder tried to make their AI coding agent install a known-malicious npm package, security firm Forever Security said in a report published last week. The company caught the attempt on a real customer's machine and stopped the agent before any code ran.
AI summaries can be wrong sometimes—always verify important details using the source article.
How AI & Automation are usedMore from Cybersecurity
Continue reading recent Cybersecurity coverage
- 10 most powerful cybersecurity companies todayContinue reading
- Bright Security Introduces STAR Fuzzer, Agentic Fuzzing That Writes Its Own Harnesses and Proves Every FindingContinue reading
- Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other ServersContinue reading
- AI coding agents hijacked using AGENTS.md file in Downloads folderContinue reading
Support HappeningNow
Independent AI-powered news analysis is reader-supported. Your contribution helps cover infrastructure, summaries, and continued platform development.
Support HappeningNow