A file that a website saves to the Downloads folder without approval can trick AI coding agents into installing a malicious npm package or handing over the user’s login token when they’re opened in that folder, Forever Security has found. The file is called AGENTS.md, a plain text document developers place in a project folder with instructions for... Weiterlesen: AI coding agents fall for malicious instructions planted in the Downl…
Intelligence View
⚡ tsecurity.de Intelligence
AI coding agents fall for malicious instructions planted in the Downloads folder
A file that a website saves to the Downloads folder without approval can trick AI coding agents into installing a malicious npm package or handing over the…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwandte Story-Cluster & Quellen (Vektor-KI)
30 Quellen
CVE-2024-13362 | Post SMTP Plugin on WordPress Parameter url cross site scripting
29 weitere Quellen
VVulDB Updatesvor 4 Std.CVE-2024-13362 | Lightbox & Modal Popup Plugin on WordPress Parameter url cross site scripting VVulDB Updatesvor 4 Std.CVE-2024-13362 | XT Floating Cart for WooCommerce Plugin on WordPress Parameter url cross site scripting VVulDB Updatesvor 4 Std.CVE-2024-13362 | Internal Link Juicer Plugin on WordPress Parameter url cross site scripting VVulDB Updatesvor 4 Std.CVE-2024-13362 | Knowledge Base Documentation & Wiki Plugin on WordPress Parameter url cross site scripting VVulDB Updatesvor 4 Std.CVE-2024-13362 | Independent Analytics Plugin on WordPress Parameter url cross site scripting VVulDB Updatesvor 4 Std.CVE-2024-13362 | Optimized Minify Plugin on WordPress Parameter url cross site scripting
+23
12 Quellen
CVE-2026-53317 | Linux Kernel up to 6.12.90/6.18.32/7.0.9 wifi denial of service
11 weitere Quellen
VVulDB Updatesvor 5 Std.CVE-2026-53258 | Linux Kernel up to 6.18.35/7.0.12 wifi cfg80211_scan int_scan_req memory leak VVulDB Updatesvor 8 Std.CVE-2026-43042 | Linux Kernel up to 6.19.11 mpls platform_label out-of-bounds VVulDB Updatesvor 8 Std.CVE-2026-43185 | Linux Kernel up to 6.18.15/6.19.5 smb_direct_prepare_negotiation buffer overflow VVulDB Updatesvor 7 Std.CVE-2026-43244 | Linux Kernel up to 6.12.74/6.18.15/6.19.5 kcm_write_msgs null pointer dereference VVulDB Updatesvor 7 Std.CVE-2026-43271 | Linux Kernel up to 6.6.127/6.12.74/6.18.15/6.19.5 process_metadata_update null pointer dereference VVulDB Updatesvor 7 Std.CVE-2026-43250 | Linux Kernel up to 6.12.74/6.18.15/6.19.5 ChipIdea UDC Driver _ep_nuke memory corruption
+5
8 Quellen
GitHub - HappyHackingSpace/claude-code-backdoor-check: Read-only scanner for the backdoored Claude Code 2.1.313 extension (Cursor marketplace, Oct 2026): SSH key, persistence, reverse tunnel. macOS + Linux.
7 weitere Quellen
IIT Security Newsvor 4 Std.Hackers Distribute Malicious Claude Code Extension on Cursor Marketplace to Install Persistent SSH Backdoor GGBHackers Securityvor 4 Std.Hackers Distribute Malicious Claude Code Extension on Cursor Marketplace to Install Persistent SSH Backdoor DDEV Communityvor 4 Std.Claude Code for VS Code 2.1.313 backdoor: how to check your machine and clean up GGoogle Alertvor 5 Std.Claude-Code-Erweiterung im Cursor-Marktplatz mit Malware infiziert | heise online KKitPloitvor 7 Std.claude-code-backdoor-check CCyber Security Newsvor 7 Std.Microsoft Warns of Trojanized Claude Code Extension Planting Persistent SSH Backdoor
+1
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/de/4297102/it-security-nachrichten/ai-coding-agents-fall-for-malicious-instructions-planted-in-the-downloads-folder/