Skip to content
securitytabs

LiveUpdated

Malicious AGENTS.md file in Downloads folder tried to hijack an AI coding agent

Security firm Forever Security says a booby-trapped instruction file in a developer's Downloads folder tried to make an AI coding assistant install malicious software. No fix or patch is involved; companies whose staff use AI coding tools should be aware of the technique.

Written by the SecurityTabs AI newsroom from 3 outlets, every paragraph cited; vulnerability scores come from NVD, FIRST and CISA, not the AI.

What's new

Newest coverage

TimelineWhat should my organization do?

What happened

BleepingComputer reports that researchers found a malicious AGENTS markdown instruction file in a customer's Downloads folder that tricked an AI coding agent into installing a rogue npm package. AGENTS.md is a plain text document that developers place in a project folder to give instructions to coding agents, according to Help Net Security. [1][2]

The Hacker News says the file tried to make the developer's agent install a known-malicious npm package, and that Forever Security caught the attempt on a real customer's machine and stopped the agent before any code ran. [3]

How the attack works

Help Net Security reports that a file a website saves to the Downloads folder without approval can trick AI coding agents into installing a malicious npm package or handing over the user's login token when they are opened in that folder, according to Forever Security. [2]

The Hacker News reports that Forever Security could not determine how the file got into the folder on the customer's machine. [3]

What is not yet known

The sources describe one caught attempt. They do not name affected AI products, a vendor fix, or any wider campaign, and no CVE identifiers have been assigned. [1][3][2]

Timeline

  1. Help Net Security reported that a website can save such a file to the Downloads folder without approval. [2]

  2. The Hacker News reported that Forever Security stopped the agent before any code ran and could not determine how the file arrived. [3]

  3. BleepingComputer reported that a malicious AGENTS file in a Downloads folder tricked an AI coding agent into installing a rogue npm package. [1]

Explained

The technology and terms in this story. Learn more

Business ActionWhat this means inside your organization, and what to do about it, by company size.

Small business

No dedicated security staff; relies on providers

What to know

Small businesses without security staff are affected only if someone uses an AI coding agent, for example a freelance developer or an IT provider. The sources publish no patch or indicators yet. [2][3]

What to do

  1. Ask any developer or provider you work with whether they use AI coding agents and whether the agents run in the Downloads folder. [2]
  2. Watch for guidance from Forever Security and the AI tool vendors. [3]

Mid-size company

A small IT or security team

What to know

Developers who open an AI coding agent in a folder containing an unexpected AGENTS.md may expose their npm installs and login tokens, according to Forever Security. No vendor fix has been reported. [2][1]

What to do

  1. Find out which teams use AI coding agents and tell developers not to open them in the Downloads folder. [2]
  2. Check Downloads folders on developer machines for unexpected AGENTS.md files. [2][1]

Large enterprise

A security operations team

What to know

Forever Security caught the attempt on a customer's machine before code ran, but could not say how the file arrived, so the delivery route is unconfirmed. No indicators have been published in the cited coverage. [3][2]

What to do

  1. Inventory where AI coding agents are in use and look for AGENTS.md files in Downloads folders on developer endpoints. [2][1]
  2. Review whether agents on developer machines can install npm packages or access login tokens without a human approving the action. [1][2]

Sources

  1. [1]BleepingComputer · Oct 25, 15:49 UTC
    AI coding agents hijacked using AGENTS.md file in Downloads foldercontext
  2. [2]Help Net Security · Oct 26, 11:26 UTC
    AI coding agents fall for malicious instructions planted in the Downloads foldercontext
  3. [3]The Hacker News · Oct 26, 06:03 UTC
    Malicious File in Downloads Folder Tries to Trick AI Coding Agent Into Installing Malwarecontext