From Dev.to
AGENTS.md Files in Downloads Can Hijack Codex and Claude Code
Forever Security reported on October 22 that a planted AGENTS.md file in ~/Downloads can hijack Codex and Claude Code In Forever's tests, a malicious AGENTS.md got Codex to run the attacker's payloa...