Malicious AGENTS.md File Hijacks Codex and Claude Code, Exposes Developer Secrets

A malicious AGENTS.md file placed in a user's Downloads folder caused an AI coding agent to attempt installing rogue npm malware, and Forever Security reproduced related attacks against Codex and Claude Code, exposing risks to developer configurations and OAuth tokens. The reported attacks target the agent instruction files and credentials used by developers running those coding agents.

A malicious AGENTS.md file in a user's Downloads folder caused an AI coding agent to attempt installing rogue npm malware. Forever Security reproduced related attacks against Codex and Claude Code, revealing risks to developer configurations and OAuth tokens. The post Malicious AGENTS.md File Hijacks Codex and Claude Code, Exposes Developer Secrets https://cyberupdates365.com/agents-md-attack-codex-claude-code/ appeared first on CyberUpdates365 | Latest Cybersecurity News & Vulnerabilities https://cyberupdates365.com .