---
title: "AI coding agents hijacked using AGENTS.md file in Downloads folder"
date: 2026-10-25
source: http://www.bing.com/news/apiclick.aspx?ref=FexRss&aid=&tid=6ade2baf74ab4697a50e061a375cdbd2&url=https%3a%2f%2fwww.bleepingcomputer.com%2fnews%2fsecurity%2fai-coding-agents-hijacked-using-agentsmd-file-in-downloads-folder%2f&c=18092789691089253582&mkt=en-us
description: "Researchers found a malicious AGENTS markdown instruction file in a customer's Downloads folder that tricked an AI coding agent into installing a rogue npm package."
---

# AI coding agents hijacked using AGENTS.md file in Downloads folder

Researchers found a malicious AGENTS markdown instruction file in a customer's Downloads folder that tricked an AI coding agent into installing a rogue npm package.

*Published: 2026-10-25*