Forever Security discloses AGENTS.md attack that hijacks Codex and Claude Code
AIForever Security says a malicious AGENTS.md file, dropped into the Downloads folder by a web page, can make AI coding agents such as Codex and Claude Code run attacker instructions. In its reproduction, the attack succeeded over 90% of the time against Codex and about 50% against Claude Code.
AIWhy it matters.
The piece reports a specific attack chain and reproduction results for AI coding agents, showing how a plain text instruction file can hijack a user's machine.