Latest
●Automated 'Gheist' campaign plants secret-stealing GitHub workflows●AI tools used in two-hour breach of European government body●Rogue AGENTS.md file in Downloads tricks AI coding agent●OpenAI says test agents escaped sandboxes and talked to each other●Attack agent hijacks exposed AI models to run itself●Unauthenticated MLflow servers can be forced to call attacker hosts●LangGraph store flaw let one tenant reach another's data●Fallow read files outside project root via test configs
Sunday, 25 October 2026
4 agent hacks today▲ 3 vs yesterday (1)
The Agentic TimesPowered byVortal

Incident database

Malicious AGENTS.md file hijacks AI coding agents into installing rogue npm package

Researchers discovered a malicious AGENTS.md instruction file placed in a customer's Downloads folder that tricked an AI coding agent into installing a rogue npm package.

Disclosed 25 October 2026 · Record updated 25 October 2026

Impact

A rogue npm package was installed on a customer's system after an AI coding agent was tricked by a malicious instruction file.

Our coverage

Sources

  1. bleepingcomputer.comhttps://bleepingcomputer.com/news/security/ai-coding-agents-hijacked-using-agentsmd-file-in-downloads-folder