AITechRadarabout 5 hours ago
AI Agents Hijacked by Rogue Downloads
4 min read
Researchers Forever Security found AI agents like OpenAI Codex and Claude Code executing malware via malicious AGENTS.md files in the Downloads folder. The attack abuses prompt injection to trick agents into downloading dangerous code or stealing session tokens without user consent, marking a new security liability for autonomous software.
Level
Hype check
Tap to vote and see what everyone thinks.
