Malicious AGENTS.md file tricked AI coding tools into installing malware
Oct 25, 2026 · Summarized by Fundy Tech from BleepingComputer
Researchers found that an AGENTS.md file in a Downloads folder could steer AI coding agents into harmful actions. The tests worked against OpenAI Codex and Claude Code.
Key points
- A customer’s Downloads folder held a malicious AGENTS.md file.
- OpenAI Codex and Claude Code were shown to follow the instructions.
- The attack could lead to rogue package installs or credential theft.
Why it matters
If your staff use AI coding tools, a downloaded file can shape what those tools do next. That raises the risk of unwanted commands, package installs or credential leaks. Households and small businesses should be careful with files saved into Downloads and with agents running in that folder.
Who’s affected: AI coding agents and their users
What to do
- Review what files sit in your Downloads folder.
- Treat AGENTS.md files as potentially dangerous instructions.
- Use caution before letting AI agents act in writable folders.
- Check whether your coding tools load local instruction files automatically.
Original reporting
Not sure if this affects you?
Fundy Tech helps businesses and households across Atlantic Canada stay patched, protected and up to speed. Tell us what you’re running and we’ll tell you straight whether you need to act.