AI & EMERGING TECH
A malicious AGENTS.md file in a user's Downloads folder caused an AI coding agent to attempt installing rogue npm malware. Forever Security reproduced related attacks against Codex and Claude Code, revealing risks to developer configurations and OAuth tokens.
Uday Patil
Oct 26, 2026
17 min read
