SECURITYQUIET
2 hours ago
AI coding agents hijacked using AGENTS.md file in Downloads folder
SIGNALSMONITORSECURITY
What's happening
SignalsMonitor is following this as a security story. BleepingComputer is the outlet attached so far. The first report grouped here was at 25 Oct 2026, 15:49 UTC. The headline in use is “AI coding agents hijacked using AGENTS.md file in Downloads folder”. This note is SignalsMonitor's own briefing, not the publisher's article.
What we know
Researchers found a malicious AGENTS markdown instruction file in a customer's Downloads folder that tricked an AI coding agent into installing a rogue npm package. [...
BleepingComputerRead at BleepingComputer
Story timeline
Reports grouped into this story, earliest first. Exact repeats from the same outlet are collapsed.
- First reported by BleepingComputer
AI coding agents hijacked using AGENTS.md file in Downloads folder
Reported by 1 outlet
- BleepingComputer