AINewsnow

AGENTS.md Files in Downloads Can Hijack Codex and Claude Code

This story is from 2026-10-27. It is preserved in the archive; the latest stories are on the live feed.

Forever Security reported on October 22 that a planted AGENTS.md file in ~/Downloads can hijack Codex and Claude Code In Forever's tests, a malicious AGENTS.md got Codex to run the attacker's payload in more than 90% of attempts A matching CLAUDE.md variant shipped out a live OAuth token in roughly…

Read the full story at DEV Community — AI ↗

Timeline · 1 report

  1. 2026-10-27 21:27 · DEV Community — AI
    AGENTS.md Files in Downloads Can Hijack Codex and Claude Code

More stories

  1. Anthropic reveals plans for blockbuster IPO — Sky News Technology
  2. Anthropic details early drug development work with six partners and says it has acquired Mithril, a one-person company working on muscular dystrophy (Anthropic) — Techmeme
  3. Frontier AI labs say their models refuted the Exponential Time Hypothesis. What does that mean? — TechCrunch AI
  4. Anthropic's IPO filing shows soaring sales and steep losses — France 24 — Artificial Intelligence
  5. How Anthropic ships the #1 LLM in the World safely: Separating the Brain from the Hands — Latent Space
  6. Meta announces $95B offering to fund AI — Semafor Technology
  7. Moonshot apologises after Kimi K3.1 Pro roll-out stumbles as promotional scrutiny widens — South China Morning Post Tech
  8. Anthropic's Claude bypassed a paywall to access Georgia voter data without authorization — Axios AI+

Get the daily brief of stories like this at 6:30 every morning →