Security News AI coding agents hijacked using AGENTS.md file in Downloads folder BleepingComputer Daniel Bender 25 Oct 2026 Share Researchers found a malicious AGENTS markdown instruction file in a customer's Downloads folder that tricked an AI coding agent into installing a rogue npm package.