QbitAI·· 8 days agoFeatured78
AGENTS.md exposed as a new attack entry point, capable of hijacking Codex and Claude Code
Brief overview
Security agency Forever Security disclosed an attack technique: web pages silently download malicious AGENTS.md to ~/Downloads, and when users start Codex or Claude Code in that directory, the Agent executes it as project specifications.
Why it matters
The article reproduces the attack chain of poisoning AGENTS.md through the download directory to hijack Codex and Claude Code, and provides executable troubleshooting steps.
Source: QbitAI · qbitai.com