{"data":{"id":"5d77779e-c4c9-4d49-a11d-710311be4df5","title":"Malicious downloads can trick AI coding agents into compromising themselves","summary":"Forever Security reported that malicious AGENTS.md and CLAUDE.md instruction files can make AI coding agents install malicious packages, alter machine-wide MCP server configurations, or redirect API traffic and expose authentication tokens. Its tests against OpenAI's Codex and Anthropic's Claude Code succeeded in more than 90% and about half of attempts respectively, mostly with harmless substitutes for malware. IDC's Sakshi Grover called the research a credible early warning rather than evidence of widespread exploitation, noting the success rates had not been independently validated.","solution":"N/A -- no mitigation discussed in source.","labels":["security","industry"],"sourceUrl":"https://www.csoonline.com/article/4240222/malicious-downloads-can-trick-ai-coding-agents-into-compromising-themselves.html","publishedAt":"2026-10-26T10:35:08.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"medium","attackType":["prompt_injection","supply_chain"],"issueType":"news","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["OpenAI","Anthropic"],"affectedVendorsRaw":["Codex","Claude Code","OpenAI","Anthropic"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-10-26T10:35:08.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":["AML.T0010","AML.T0051"]}}