AGENTS.md exposed as a new attack entry point, capable of hijacking Codex and Claude Code
Security agency Forever Security disclosed an attack technique: web pages silently download malicious AGENTS.md to ~/Downloads, and when users start Codex or Claude Code in that directory, the Agent executes it as project specifications.
Why it matters: The article reproduces the attack chain of poisoning AGENTS.md through the download directory to hijack Codex and Claude Code, and provides executable troubleshooting steps.


