Malicious File in Downloads Folder Tries to Trick AI Coding Agent Into Installing Malware

A malicious AGENTS.md instruction file found in a developer’s Downloads folder tried to make their AI coding agent install a known-malicious npm package, security firm Forever Security said. The file, disguised as engineering notes, directed the agent to add a server to its configuration and install the package function-color, part of a malware campaign other researchers have named MALFEX; Forever said it stopped the attempt before any code ran, reproduced the attack against Codex in more than 90% of attempts, and achieved a related Claude Code variant about half the time.