Researchers discovered a malicious AGENTS.md file in a customer's Downloads folder that tricked an AI coding agent into installing a rogue npm package.
The vulnerability or weakness
The vulnerability lies in the AI agent's automatic loading and execution of instructions from the AGENTS.md file in its working directory, which can be manipulated to execute malicious commands.
Earlier attacks and coverage
No earlier related attack in our archive yet.
Business impact
This incident could lead to unauthorized code execution, data theft, and account hijacking, resulting in operational disruptions and potential legal liabilities for affected organizations.
Industries affected
Tech and software development companies are particularly at risk due to their reliance on AI coding agents.
Users affected
Developers and IT professionals using AI coding agents are at risk of having their work environments compromised, potentially leading to the leakage of sensitive information.
Build these skills
Sources
- AI coding agents hijacked using AGENTS.md file in Downloads folder (BleepingComputer)
