TechBleepingComputer1h ago
AI coding agents hijacked using AGENTS.md file in Downloads folder
TL;DRA malicious file in Downloads tricked AI coding agents into installing harmful software.
Why it matters: Reveals how AI agents can be exploited through simple social engineering, affecting developer security.
Researchers found a malicious AGENTS markdown instruction file in a customer's Downloads folder that tricked an AI coding agent into installing a rogue npm package. [...]
Read full articleSource: BleepingComputer · Opens in new tab