AI coding agents hijacked via AGENTS.md file in Downloads folder
Researchers show attackers can manipulate OpenAI Codex and Claude Code by exploiting how browsers save files and agents read instructions
Security researchers have demonstrated that AI coding agents can be hijacked by a malicious AGENTS.md file placed in a user's Downloads folder, tricking the tool into installing rogue packages or leaking OAuth tokens. The attack relies on intended browser and agent behaviour, not a software vulnerability.