token theft

AI Coding Agents Can Be Turned by a File in Downloads

A planted AGENTS.md in a developer's Downloads folder nearly made OpenAI's Codex install malware. The guardrails are cheap; most teams lack them.