As cited
Copy frozen at (site build).
ai security
AI coding agents hijacked using AGENTS.md file in Downloads folder
Researchers discovered a malicious AGENTS markdown file placed in a customer's Downloads folder that deceived an artificial intelligence (AI) coding agent into installing a malicious npm package. The attack exploited how AI agents read and execute instructions from files in accessible directories.
Why it matters: Development teams using AI coding agents are exposed to local file-based prompt injection attacks that can lead to supply chain compromise through rogue package installation.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
ai security
AI coding agents hijacked using AGENTS.md file in Downloads folder
Researchers discovered a malicious AGENTS markdown file placed in a customer's Downloads folder that deceived an artificial intelligence (AI) coding agent into installing a malicious npm package. The attack exploited how AI agents read and execute instructions from files in accessible directories.
Why it matters: Development teams using AI coding agents are exposed to local file-based prompt injection attacks that can lead to supply chain compromise through rogue package installation.
- Source published
- First seen by Cybersecurity Tracker