Malicious AGENTS.md files can hijack AI coding agents into running malware and leaking tokens
Poisoned Markdown instruction files let agents alter MCP configuration, bypass approvals and leak OAuth tokens; one real attempt was blocked at a customer.
55