Attackers are planting agent instructions in the Downloads folder [Oct 26 2026]
Forever Security says it found a malicious AGENTS.md file in the ~/Downloads folder of a real customer machine and stopped a coding agent mid-session from installing "function-color", which it calls "a known malicious npm package from a campaign that flew under the radar for roughly two years". The researchers reproduced the chain against OpenAI Codex with a harmless payload "recording a 90% success rate", and used a malicious CLAUDE.md to expose Claude Code's OAuth token. Their conclusion: "There is nothing here for OpenAI or Anthropic to patch. An agent that follows the AGENTS.md in its…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.