Research explained
Malicious AGENTS.md file tried to turn a coding agent into a malware installer
The customer attempt was stopped before code ran; the file’s arrival route remained unknown.
What happened
Forever Security reported finding a malicious AGENTS.md instruction file in a customer’s Downloads folder. It attempted to make a coding agent modify configuration and install a package connected to a known malware chain.
The company said it stopped the customer attempt before code execution. Researchers later reproduced attack paths in controlled tests, but did not establish how the original file reached the folder. That distinction matters when describing an observed attempt versus a completed compromise.
Review instruction files in unfamiliar directories before starting an agent there. Require approval for persistent configuration changes and dependency installation, and investigate unexpected agent instructions as potentially hostile input rather than ordinary project documentation.
Next step
Inspect directory instruction files and review persistent configuration or dependency changes.
What remains unknown
- Open question
- The sources reviewed do not establish whether your deployment was exploited.
Source references
-
THE