Malicious File in Downloads Folder Tries to Trick AI Coding Agent Into Installing Malware

Forever Security detected an AGENTS.md file on a real customer's machine that tried to make a coding agent install the malicious npm package function-color. The agent was stopped before any code ran; the file's origin could not be determined.