The File You Didn’t Write: How a Stray AGENTS.md Can Hijack an AI Coding Agent
A planted AGENTS.md in Downloads pushed a coding agent toward malware. Here is how the AGENTS.md hijack works, what Forever Security measured, and what developers can do about it.