Security News Malicious File in Downloads Folder Tries to Trick AI Coding Agent Into Installing Malware TheHackerNews Daniel Bender 26 Oct 2026 Share A malicious AGENTS.md file led Codex to execute npm malware in over 90% of tests, while a separate Claude Code attack exposed login tokens.