aiqbench takeAI Safety

Coding agents that read project instruction files can be steered by planted text, so a Markdown file in a download folder can cause real actions like changing settings, installing a malicious package, or exposing tokens. The attack needs several conditions to line up, including the victim running the agent in that folder and the agent having file, command, and network access. Developers using Codex, Claude Code, or similar tools should treat agent instruction files from untrusted sources as executable input and restrict agent permissions accordingly.

Sources coveringCybersecurity News, LessWrong

What this isA model's reading of the article and related coverage, written for aiqbench. Not the publisher's words.

Hackers Can Hijack OpenAI Codex and Claude Code Using Malicious Files in Downloads Folder

Cybersecurity NewsOctober 26, 20264 min read

A plain text file placed in the Downloads folder can trick AI coding agents into changing their settings, installing malware, or exposing login tokens. Forever Security discovered the risk after stopping an agent on a real customer’s computer from installing a known malicious npm package. The company later reproduced separate attack paths against OpenAI Codex […] The post Hackers Can Hijack OpenAI Codex and Claude Code Using Malicious Files in Downloads Folder appeared first on Cyber Security News.

A plain text file placed in the Downloads folder can trick AI coding agents into changing their settings, installing malware, or exposing login tokens. Forever Security discovered the risk after stopping an agent on a real customer’s computer from installing a known malicious npm package. The company later reproduced separate attack paths against OpenAI Codex and Anthropic Claude Code in controlled tests. The incident began when Forever Security blocked an AI coding agent from installing a package named function-color.…

Excerpt shown under the publisher's RSS terms · 79 words · full text and figures are on the publisher's site

Read at Cybersecurity News ↗Ask about this article