Security
A rogue AGENTS.md in your Downloads folder can hijack Codex and Claude Code. Here's how to lock it down
Researchers found a malicious instruction file that tricked a coding agent into installing an unauthorized npm package — and reproduced it with a 90% success rate. Five settings that close the hole.
