{"id":"thehackernews-63f16ca1b1ad","seq":1261044,"kind":"news","title":"Malicious File in Downloads Folder Tries to Trick AI Coding Agent Into Installing Malware","url":"https://thehackernews.com/2026/10/malicious-file-in-downloads-folder.html","permalink":"https://vulnpulse.app/items/thehackernews-63f16ca1b1ad","summary":"A malicious instruction file sitting in a developer's Downloads folder tried to make their AI coding agent install a known-malicious npm package, security firm Forever Security said in a report published last week. The company caught the attempt on a real customer's machine and stopped the agent before any code ran. It could not determine how the file got into the folder. The file","severity":null,"techs":["nodejs"],"cves":[],"tags":["security"],"source":{"id":"thehackernews","name":"The Hacker News"},"published_at":"2026-10-26T06:03:48.000Z","fetched_at":"2026-10-26T07:49:50.755Z"}