Security · 27 October 2026
UnconfirmedForever Security stops malicious AGENTS.md file from tricking AI coding agent
A plain‑text AGENTS.md file placed in a developer’s Downloads folder attempted to make an AI coding agent such as OpenAI’s Codex install the malicious npm package function‑color, part of the MALFEX campaign; security firm Forever Security intercepted the attempt on a customer machine.
Why it matters
Implement validation of instruction files read by AI coding agents to block malicious npm install commands.
For product managers
For your product
What does this mean for your product?
Try it on your product More from this issueAll AI news from 27 Oct →
Get this every morning, written for your product.
Deltaday reads the whole AI news cycle and tells you what changed, whether it's real yet, and what to do about it.