AI coding agents hijacked using AGENTS.md file in Downloads folder
// AI summary
Researchers found a malicious AGENTS markdown file in a Downloads folder tricked an AI coding agent into installing a rogue npm package.
// from the source
Researchers found a malicious AGENTS markdown instruction file in a customer's Downloads folder that tricked an AI coding agent into installing a rogue npm package. [...]