How AI Coding Agents Can Be Hijacked Using Malicious AGENTS.md Files
Researchers discovered a malicious AGENTS.md file in a customer's Downloads folder that tricked an AI coding agent into installing a rogue npm package, potentially exposing sensitive information.