## Malicious File in Downloads Folder Tries to Trick AI Coding Agent Into Installing Malware

- 種別: news
- 関連技術: nodejs
- 公開日時: 2026-10-26T06:03:48.000Z
- 情報源: The Hacker News (https://thehackernews.com/2026/10/malicious-file-in-downloads-folder.html)
- パーマリンク: https://vulnpulse.app/items/thehackernews-63f16ca1b1ad

A malicious instruction file sitting in a developer's Downloads folder tried to make their AI coding agent install a known-malicious npm package, security firm Forever Security said in a report published last week. The company caught the attempt on a real customer's machine and stopped the agent before any code ran. It could not determine how the file got into the folder. The file