5 min read
Research Forever Security found a malicious AGENTS.md in a customer's Downloads folder and reproduced the attack on OpenAI Codex and Claude Code in lab tests. Success rates were about 90% for Codex and about 50% for a Claude Code variant.