Malicious AGENTS.md File Hijacks AI Coding Agents from Downloads
Researchers at Forever Security say a malicious AGENTS.md file in a customer’s Downloads folder led an AI coding agent to try to install a rogue npm package called function-color . The researchers reproduced related…