A downloaded AGENTS.md file can redirect AI coding agents
Researchers demonstrated that a malicious instruction file in a Downloads folder can cause AI coding agents to install packages, execute commands or expose credentials when the agent is launched from that directory.