# Forever Security discloses AGENTS.md attack that hijacks Codex and Claude Code

> Original title: AGENTS.MD，危险危险危险！！！

- Source: QbitAI
- Published: 2026-11-07T03:43:55.000Z
- Bad Influence: https://badinfluence.news/items/wgg6mfcjdmfyqrpnew4ya8dfj
- Original: https://www.qbitai.com/2026/11/508244.html

## Summary

Forever Security says a malicious AGENTS.md file, dropped into the Downloads folder by a web page, can make AI coding agents such as Codex and Claude Code run attacker instructions. In its reproduction, the attack succeeded over 90% of the time against Codex and about 50% against Claude Code. The article lists checks users can run and argues that agent-era security must change.

## Why it matters

The piece reports a specific attack chain and reproduction results for AI coding agents, showing how a plain text instruction file can hijack a user's machine.