From The Hacker News
A malicious instruction file sitting in a developer's Downloads folder tried to make their AI coding agent install a known-malicious npm package, security firm Forever Security said in a report published last week. The company caught the attempt on a real customer's machine and stopped the agent before any code ran. It could not determine how the file got into the folder. The file
Publisher-provided RSS excerpt. This is not the full article or an independently verified AEGLIX assessment.
Read the full story at The Hacker News ↗ (opens in a new tab)