50/100
Researchers found a malicious AGENTS markdown instruction file in a customer's Downloads folder. The file led an AI coding agent to install a rogue npm package. Organisations using AI coding agents should check which instruction files the agents load and monitor package installs.