Planted instruction files can steer AI coding agents into installing malware
Forever Security says an AGENTS.md file dropped into a Downloads folder led a coding agent to try installing a malicious npm package, and that both Codex and Claude Code could be steered in tests.
