Malicious File in Downloads Folder Tries to Trick AI Coding Agent Into Installing Malware

Security firm Forever Security detected a malicious AGENTS.md file in a developer's Downloads folder that tried to trick AI coding agents like OpenAI's Codex into installing malware via a known malicious npm package. The attack exploits AI agents' trust in local instruction files and the ability of web pages to silently save files to Downloads, enabling malware installation without user consent. The firm demonstrated the attack's effectiveness on multiple AI coding agents, highlighting a new AI-