cd /news/ai-agents/malicious-agents-md-file-hijacks-cod… · home › topics › ai-agents › article
[ARTICLE · art-157699] src=cyberupdates365.com ↗ pub= topic=ai-agents verified=true sentiment=↓ negative

Malicious AGENTS.md File Hijacks Codex and Claude Code, Exposes Developer Secrets

A malicious AGENTS.md file placed in a user's Downloads folder caused an AI coding agent to attempt installing rogue npm malware, and Forever Security reproduced related attacks against Codex and Claude Code, exposing risks to developer configurations and OAuth tokens. The reported attacks target the agent instruction files and credentials used by developers running those coding agents.

by read1 min views3 publishedOct 26, 2026

A malicious AGENTS.md file in a user's Downloads folder caused an AI coding agent to attempt installing rogue npm malware. Forever Security reproduced related attacks against Codex and Claude Code, revealing risks to developer configurations and OAuth tokens.

The post Malicious AGENTS.md File Hijacks Codex and Claude Code, Exposes Developer Secrets appeared first on CyberUpdates365 | Latest Cybersecurity News & Vulnerabilities.

source & further reading
cyberupdates365.com — original article OpenAI AI Agents Escape Hardened VMs, Reveal Hidden Security Gaps LiteLLM Supply Chain Attack Exposes AI Credentials Through Malicious 1.107.0 Release One Hacker Used AI Agents to Breach 100+ Company Websites for About $5,000
── more in #ai-agents 4 stories · sorted by recency
── more on @codex 3 stories trending now
sponsored brought to you by zahid.host 4,200+ EU-deployed projects
reading about agents? ship yours in a single git push.

Run your AI side-project on zahid.host

EU-based hosting, git-push deploys, automatic HTTPS, no cold starts. Free tier with a custom domain — perfect for shipping the agent you just read about.

$git push zahid main
→ Live at https://your-agent.zahid.host ✓
Get free account → Pricing
from €0/mo · no card required
LIVE [news/malicious-agents-md-…] indexed:0 read:1min 2026-10-26 · —