AINewsnow

A Poisoned AGENTS.md in ~/Downloads Hijacked Codex and Claude Code. Here's Where the Scrub Step Fits.

Forever Security found a malicious AGENTS.md sitting in a customer's ~/Downloads folder. That folder was also the agent's working directory. The file tricked an AI coding agent into trying to install a rogue npm package called function-color . BleepingComputer covered the research , and the numbers…

Read the full story at DEV Community — AI ↗

Timeline · 2 reports

  1. 2026-10-31 18:49 · DEV Community — AI
    How to stop Cursor and Claude Code breaking your project: a free AGENTS.md starter
  2. 2026-10-31 15:37 · DEV Community — AI
    A Poisoned AGENTS.md in ~/Downloads Hijacked Codex and Claude Code. Here's Where the Scrub Step Fits.

More stories

  1. We Tested 5 AI Coding Tools on 20 Beginner Errors. The 'Best' One Wasn't the Smartest — DEV Community — AI
  2. Eliminating AI Coding Loops: Deterministic Flight Recording & Polyglot Blast-Radius with genesis-blackbox v0.2.0 — DEV Community — AI
  3. Why the Model Context Protocol (MCP) Is Changing How We Connect AI Frameworks — DEV Community — AI
  4. How do you sandbox your AI coding agent? Looking to compare setups — r/AI_Agents
  5. Google, Microsoft, OpenAI and Anthropic to honor shared robots.txt opt-out for AI training — OpenAI News
  6. Claude Code ecosystem expands as multi-agent workflows and security concerns grow — Microsoft Research Blog
  7. How does the Zoho Analytics MCP server work? Close to 20 tools, delete rows included, and a live gate test — DEV Community — AI
  8. Building a read-only MCP server where a connector token can never become a login — DEV Community — AI

Get the daily brief of stories like this at 6:30 every morning →