Security Feed
  1. Archives

Oct 25 2026 AI coding agents hijacked using AGENTS.md file in Downloads folder

Source

Researchers found a malicious AGENTS markdown instruction file in a customer's Downloads folder that tricked an AI coding agent into installing a rogue npm package. [...]

Posted by Bill Toulas on Sun 25 October 2026 in BleepingComputer.

Tags: Security, Artificial Intelligence.

Categories

  1. Ars Technica
  2. AWS Security
  3. BleepingComputer
  4. Brian Krebs
  5. Bruce Schneier
  6. GCP Security
  7. Google Project Zero
  8. The Daily Swig
  9. The Guardian
  10. The Register
  11. Threatpost

Tag cloud

  • Security
  • Uncategorized
  • Security, Identity, & Compliance
  • Security Blog
  • Biz & IT
  • Microsoft
  • AI
  • Security & Identity
  • Artificial Intelligence
  • Announcements
  • CryptoCurrency
  • Google
  • Foundational (100)
  • Legal
  • privacy
  • A Little Sunshine
  • Hacking
  • Technical How-to
  • Advanced (300)
  • Apple
  • squid
  • LLM
  • Intermediate (200)
  • Mobile
  • vulnerabilities

Security Feed. Powered by Pelican and m.css. Code is available on GitLab.