AI Coding Agents Hijacked via Malicious AGENTS.md File
Researchers found that a malicious AGENTS.md file in Downloads folders can trick AI coding agents into installing rogue npm packages, illustrating a new supply chain risk for AI-driven development tools.