Malicious File in Downloads Folder Tries to Trick AI Coding Agent Into Installing Malware
A malicious AGENTS.md file led Codex to execute npm malware in over 90% of tests, while a separate Claude Code attack exposed login tokens.
More info