Articles tagged

#npm

A Downloads folder on a laptop screen with an AGENTS.md file in it, and an AI coding agent's terminal next to it typing out an npm install command

AIOctober 25, 2026

One AGENTS.md in Downloads is all it takes to hijack an AI coding agent

Researchers found that a single instruction file sitting in a Downloads folder pushed an AI coding agent to install a malicious npm package. No patch is coming: the agent did exactly what it was built to do, so where you launch it is up to you.

A laptop showing a video interview window next to a code editor, illustrating the fake job interviews used by the WaterPlum group.

SecuritySeptember 21, 2026

Joint advisory on WaterPlum: 30,000 devices, $10.7M diverted

A joint advisory from Japanese, US, Australian and German authorities credits North Korean group WaterPlum with 30,000 compromised devices and $10.7M in cryptocurrency moved to North Korea. The way in is still a fake job offer sent to a developer.

One AGENTS.md in Downloads is all it takes to hijack an AI coding agent

Joint advisory on WaterPlum: 30,000 devices, $10.7M diverted

The tech and security week, every Monday in your inbox