New research shows a planted AGENTS.md or CLAUDE.md can make Codex and Claude Code install malware, rewrite their own config and leak tokens. How the attack works, and the 8 defences I use on every machine that runs an agent.
Prompt injection in AI coding agents: how one CLAUDE.md or AGENTS.md can hijack them
