Malicious File in Downloads Folder Tries to Trick AI Coding Agent Into Installing Malware

A malicious instruction file sitting in a developer's Downloads folder tried to make their AI coding agent install a known-malicious npm package, security firm Forever Security said in a report published last week. The company caught the attempt on a real customer's machine and stopped the agent before any code ran. It could not determine how the file got into the folder. The file

The Hacker Newsで読む

2026/10/26 15:03、The Hacker Newsが「Malicious File in Downloads Folder Tries to Trick AI Coding Agent Into Installing Malware」を公開しました (種別: セキュリティニュース)。関連する技術: JavaScript / Node.js。