{"slug": "agents-md-attack-web-page-hijacks-codex-and-claude-code-via-downloads", "title": "AGENTS.md Attack: Web Page Hijacks Codex and Claude Code via Downloads", "summary": "A web page can silently place a malicious AGENTS.md file into a user's Downloads folder, and OpenAI's Codex followed the injected instructions 90% of the time, according to byteiota. The attack also targets Anthropic's Claude Code, which reads AGENTS.md-style instruction files, and byteiota published guidance on what developers should do in response.", "body_md": "A web page can silently drop a malicious AGENTS.md into your Downloads folder. Codex obeyed it 90% of the time. Here is what happened and what to do now.\n\nThe post \nAGENTS.md Attack: Web Page Hijacks Codex and Claude Code via Downloads\n appeared first on \nbyteiota\n.", "url": "https://wpnews.pro/news/agents-md-attack-web-page-hijacks-codex-and-claude-code-via-downloads", "canonical_source": "https://byteiota.com/agentsmd-downloads-attack-codex-claude-code/", "published_at": "2026-10-26 10:16:45+00:00", "updated_at": "2026-10-26 10:45:35.675213+00:00", "lang": "en", "topics": ["ai-agents", "ai-safety", "ai-tools", "developer-tools"], "entities": ["Codex", "OpenAI", "Claude Code", "Anthropic", "byteiota"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/agents-md-attack-web-page-hijacks-codex-and-claude-code-via-downloads", "markdown": "https://wpnews.pro/news/agents-md-attack-web-page-hijacks-codex-and-claude-code-via-downloads.md", "text": "https://wpnews.pro/news/agents-md-attack-web-page-hijacks-codex-and-claude-code-via-downloads.txt", "jsonld": "https://wpnews.pro/news/agents-md-attack-web-page-hijacks-codex-and-claude-code-via-downloads.jsonld"}}