Malicious File Tries to Trick AI Coding Agent Into Installing Malware

Security researchers discovered an attack where a malicious instruction file located in a download directory attempted to trick an AI coding agent into installing a harmful npm package. The automated attempt was successfully intercepted before any unauthorized code execution occurred.