Your Downloads Folder Can Now Give Orders to Your AI Coding Agent
No Comments on Your Downloads Folder Can Now Give Orders to Your AI Coding Agent
Researchers found a malicious AGENTS.md in a customer's Downloads folder that pushed an AI coding agent to install a rogue npm package. Here is what was reported, why it works, and what to change today.