Search — “AGENTS.md”

Forever Security found a malicious AGENTS.md in a customer's ~/Downloads folder that caused a coding agent to attempt installing the rogue npm package 'function-color'. In lab tests, a malicious AGENTS.md drove Codex to run a harmless calculator payload at a 90% success rate, and a malicious CLAUDE.md redirected Claude Code API traffic to expose its OAuth token, executing code in roughly 50% of tests. Researchers say the file could be dropped by a web page without interaction, and that the outcome of the customer incident beyond the install attempt is not described. Hunters should look for agent processes run with ~/Downloads as working directory and for npm installs of function-color or unexpected instruction files in Downloads.