How malicious downloads can trick AI coding agents into compromising themselves Security researchers found that trusted instruction files can be abused to install malware, redirect API traffic, and weaken built-in safeguards in popular coding assistants. Published: 2026-10-25