AI coding agents hijacked using an AGENTS.md file in the Downloads folder

Researchers found a malicious AGENTS.md file in a customer’s Downloads folder whose instructions tricked an AI coding agent into installing the malicious npm package function-color. In tests, OpenAI Codex and Claude Code were manipulated to execute code and steal credentials.