Malicious File in Downloads Folder Tries to Trick AI Coding Agent Into Installing Malware
· thehackernews.com · popularity 18/100 · 0 similar stories today · Generative AI Tools & Use (Artificial Intelligence)
Read the original at thehackernews.com →
Summary
A malicious instruction file sitting in a developer's Downloads folder tried to make their AI coding agent install a known-malicious npm package, security firm Forever Security said in a report published last week. The company caught the attempt on a real customer's machine and stopped the agent before any code ran. It could not determine how the file got into the folder. The file
Found in: The Hacker News. Rating basis: single outlet; outlet tier 2 (unlisted); 1 feeds; feed position 10.