AI coding agents hijacked using AGENTS.md file in Downloads folder

Researchers found a malicious AGENTS.md instruction file in a customer’s computer that tricked an AI coding agent into installing a malicious npm package. They also demonstrated that a related technique could leak OAuth tokens from Claude Code and enable account hijacking.