Downloads file steers AI coding agent into rogue package
BleepingComputer reports researchers demonstrated how a malicious AGENTS.md file in one customer's Downloads folder steered an AI coding agent into installing a rogue npm package.
AGENTS.md files provide instructions to coding agents. Here, the agent followed instructions outside the project it was working on, then installed the package. The repository did not need to contain the hostile instruction for the agent to introduce software into the developer's environment.
For teams whose assistants can read local files beyond a checked-out project, Downloads is part of the agent's instruction surface too. A clean repository review may not reveal why an agent added a package, and that package can carry risk into local development or build workflows.
Malicious downloads can trick AI coding agents into compromising themselves
Security researchers found that trusted instruction files can be abused to install malware, redirect API traffic, and weaken built-in safeguards in popular coding assistants.