AI coding agents hijacked using AGENTS.md file in Downloads folder
-
Researchers have identified a new attack vector targeting AI coding agents, after finding a malicious AGENTS.md instruction file sitting in a customer's Downloads folder. The file was crafted to manipulate the AI agent into installing a rogue npm package, turning a routine developer workflow into a supply chain risk.
The technique abuses the way AI coding assistants automatically read instruction files such as AGENTS.md to understand project context. Because the agent trusted the file without questioning its origin, it followed the embedded instructions and pulled in the malicious dependency.
Key points for defenders:
- Treat AGENTS.md and similar agent instruction files as executable content, not harmless documentation
- Monitor Downloads folders and project directories for unexpected instruction files
- Restrict AI coding agents from automatically installing packages without review
- Audit npm dependencies for packages introduced by automated tooling
This highlights a broader concern: as AI coding agents gain autonomy over file reads and package installs, the trust boundary between "content" and "instructions" becomes a real attack surface.
Source: Unknown
Does your organization review instruction files like AGENTS.md before letting AI agents act on them?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login