Skip to content
K = 0.731Subscribe

Forever Security Reports Coding Agent Hijacking Through Malicious Project Files

1 reports 1 reporting sources Updated 3 hours ago

Understand the event

AI overview

Forever Security reported and demonstrated an attack in which malicious AGENTS.md files in download folders hijacked coding agents. QbitAI cited Forever Security and an X user's test, reporting success rates above 90% for Codex and around 50% for Claude Code. The attacks use project instruction files to influence agent behavior. QbitAI described examples involving changes to Codex's global configuration and a modified Anthropic Base URL, and listed checks for possible traces of an attack.

Generated by AI from reports · Updated 51 minutes ago

Latest development11/7 11:43 (UTC+8)
How Malicious AGENTS.md Files Can Hijack Coding AgentsQbitAI

Read next

More changes in today’s briefingMETR Says Anthropic May Have Crossed Its AI Acceleration Warning Threshold in July

Report timeline

Follow the reports to explore different sides of the event.

11/7
  1. QbitAI
    How Malicious AGENTS.md Files Can Hijack Coding Agents

    QbitAI reports on attacks in which coding agents treated malicious AGENTS.md or CLAUDE.md files as project instructions. Citing Forever Security and an X user’s test, the article says attack success exceeded 90% for Codex and was around 50% for Claude Code, with examples involving global Codex configuration and a changed Anthropic Base URL. It also lists four checks for possible traces and advises against starting agents in Downloads or Desktop.

Keep up with AI, one email a day

Model releases, price changes and compute developments, with original sources. Free, confirmed by email, and easy to unsubscribe. Read a past issue

Event heat trend

There is not enough continuous observation data to plot a trend yet.