SPIN Unprocessed October 25, 2026 ai_technology cybersecurity
AI coding agents hijacked using AGENTS.md file in Downloads folder
View original on bleepingcomputer.comOverview
Researchers found a malicious AGENTS markdown instruction file in a customer's Downloads folder that tricked an AI coding agent into installing a rogue npm package. [...]
SpinGraph analysis pending — check back after processing.
Ask AI about this story
Opens with the SpinGraph .md URL and structured context — one click, prompt included.
More from BleepingComputer
View all →- BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot
- Microsoft Teams to get AI-powered, context-aware phishing detection
- Abandoned Popcorn Time app exposed millions of devices to RCE attacks
- LiteLLM release pipeline hacked to distribute info-stealer malware
- Capcom confirms data breach affecting 11.7 million accounts
- Railway warns devs to rotate secrets after potential breach
Markdown (.md) · JSON-LD schema (.json) · Machine-readable for AI & GEO