Hackers Can Hijack OpenAI Codex and Claude Code Using Malicious Files in Downloads Folder

A plain text file placed in the Downloads folder can trick AI coding agents into changing their settings, installing malware, or exposing login tokens. Forever Security discovered the risk after stopping an agent on a real customer’s computer from installing a known malicious npm package. The company later reproduced separate attack paths against... Weiterlesen: Hackers Can Hijack OpenAI Codex and Claude Code Using Malicious Files…