
A malicious AGENTS.md file in your Downloads folder can hijack an AI coding agent
Researchers at Forever Security found that OpenAI Codex and Claude Code will silently follow instructions from a planted AGENTS.md or CLAUDE.md file if an agent is launched from the Downloads folder — no exploit, no patch needed, just a text file.










