Threat
AI Coding Agents Hijacked via AGENTS.md in Downloads Folder (2026)
First reported · Discovered aviatrix.ai
Page published
Earliest dated coverage: 25 Oct 2026 · First observed: 11 Nov 2026 · Latest dated coverage: 25 Oct 2026
Coverage timeline
Single-source research — one report is available.
Why it matters
The AGENTS.md/CLAUDE.md hijacking technique can turn an untrusted downloaded file into privileged agent instructions, exposing developer credentials and environments when coding agents run from the Downloads directory.
Forever Security researchers reportedly demonstrated coding-agent hijacking through malicious AGENTS.md or CLAUDE.md files delivered to a user's Downloads folder by browser downloads. When a developer launches an affected agent from that directory, automatic instruction-file loading can induce attacker-directed actions; reported controlled-test outcomes included rogue npm package installation, OAuth token theft, and remote code execution.