Malicious File in Downloads Folder Tries to Trick AI Coding Agent Into Installing Malware

Our takeForever Security showed that a website can drop AGENTS.md into your Downloads folder; when an AI coding agent opens a project there it follows the planted instructions and can be tricked into installing a rogue npm package. To avoid: run LLM jobs in separate directories and don't ask your agent to read md files outside its current directory.Security Resilience desk