Malicious AGENTS.md files in Downloads folders can hijack AI coding agents
Forever Security found a malicious AGENTS.md file in a customer's Downloads folder that tried to make a coding agent install a rogue npm package, exposing a risky habit of running agents there.