
Malicious AGENTS.md File Hijacks Codex and Claude Code, Exposes Developer Secrets
A malicious AGENTS.md file in a user's Downloads folder caused an AI coding agent to attempt installing rogue npm malware. Forever Security reproduced related attacks against Codex and Claude Code, revealing risks to developer configurations and OAuth tokens.





















