AI coding agents tricked by malicious AGENTS.md file in Downloads folder
Researchers discovered a tactic where a malicious AGENTS.md file in a user's Downloads folder tricks AI coding agents into installing rogue npm packages.
ITOct 26, 12:17 PM UTC2 sources