AIBleepingComputerabout 3 hours ago
AI Agents Hijacked via Downloads Folder
4 min read
Researchers found a malicious AGENTS.md file in a customer's Downloads folder tricked AI coding agents into installing rogue packages. Tests against OpenAI Codex and Claude Code showed a 90% success rate for code execution and 50% for token theft. The Blue Report 2026 measures defenses across 338 million simulations.
Level
Hype check
Tap to vote and see what everyone thinks.
