> AI coding agents hijacked using AGENTS.md file in Downloads folder
[AUTHOR: Bill Toulas]
[DATE: 25/10/2026 15:49]
[LANGUAGE: EN]
Researchers found a malicious AGENTS markdown instruction file in a customer's Downloads folder that tricked an AI coding agent into installing a rogue npm package. [...]