Malicious Downloads files can hijack Codex and Claude Code
Forever Security says a planted AGENTS.md or CLAUDE.md can change agent settings, install an npm package, or expose an OAuth token.
66
Organization
Checkmarx
- Mentions · 7d3
- Mentions · 30d15
- All mentions26
- First seenAug 17, 2026
- Last mentioned4d ago
Timeline
26 articles · newest firstPlanted Downloads files can hijack Claude Code and Codex agents
Forever Security says a planted AGENTS.md made Codex install MALFEX package function-color in over 90 percent of tests.
64
Downloads-folder instruction file tried to make a coding agent install malware
Forever stopped the agent before code ran; Codex followed the planted file in more than 90% of isolated tests.
66
MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon
Malicious npm package imgdecode, tied to MALFEX, loads a DLL that downloads and injects shellcode.
74
Top 10 Best DevSecOps Platforms in 2026 [Ranked & Scored]
A 2026 ranking puts GitLab, GitHub Advanced Security, and Snyk atop DevSecOps platforms by developer fix rates.
22
MALFEX npm Malware Hides Executables in PNG Files to Infect Windows Developers
MALFEX npm packages hide Windows malware in fake PNG files, delivering Overlord RAT and the movinlike stealer.
72
9 Best IAST Tools Compared (2026): Features & Pricing
A 2026 comparison ranks nine IAST tools, led by Contrast Security, Seeker, Dynatrace, and Datadog.
24
Malicious npm Packages Steal Browser Passwords, Discord Tokens and Crypto Wallets.
The MALFEX npm campaign ships Overlord RAT and movinlike to steal browser passwords, Discord tokens, and crypto wallets.
71
Eight Malicious npm Packages Downloaded 40,767 Times Deliver Overlord RAT and Stealer
Eight malicious npm packages, downloaded 40,767 times, installed Overlord RAT and a Node.js stealer.
73
EY Data Breach Exposes Goldman Sachs and Man Group Clients’ Tax and Financial Data
EY says a tax-platform breach exposed Goldman Sachs and Man Group clients' personal and financial data.
78
Top 10 Best IAST Tools in 2026 [Ranked & Scored]
A 2026 IAST ranking puts Contrast Security first, then Black Duck Seeker and Datadog.
16
EY Data Breach Exposes Goldman Sachs and Man Group Clients’ Data
An EY platform breach exposed tax and financial data linked to Goldman Sachs and Man Group clients.
76
Long-Running NPM Malware Campaign Accumulates 40,000 Downloads
Checkmarx says a long-running npm campaign passed 40,000 downloads of packages dropping Overlord RAT and stealers.
63
Top 10 Best SAST Tools in 2026 [Ranked & Scored]
A 2026 editorial ranking puts Snyk Code first among ten SAST tools, ahead of CodeQL and Semgrep.
18
Hackers Poison Trusted Software Updates to Steal Developer and Cloud Credentials
ReversingLabs traces S1ngularity, Shai-Hulud, and TeamPCP campaigns that poisoned npm updates to steal developer and cloud credentials.
58
Attackers Use Malicious Terraform Providers to Deliver Go Malware via HashiCorp Registry
DPRK-linked actors planted Go malware in HashiCorp Terraform providers and Go modules.
74
Malicious B-tree NPM Package Accumulates Millions of Downloads
Ongoing NPM supply chain campaign hides malware in indexed-btree's prototype code, reaching 2 million weekly downloads before detection.
58
Malicious npm Package indexed-btree Hid Its Loader in Runtime Code Before Removal
Checkmarx details malicious npm package indexed-btree hiding its loader in runtime code, netting €230,000; Socket flags PolinRider Packagist compromise.
62
New npm malware finds a way around install script defenses
Checkmarx details npm supply-chain malware hiding in BTree methods, using Ethereum smart-contract C2 and Slack/Telegram exfiltration; ten packages pulled.
60
Malicious npm Package With 2 Million Downloads Hides Malware in Runtime Code
Malicious npm package 'indexed-btree' with 2M weekly downloads hides runtime malware using blockchain-based command-and-control.
75
10 Malicious npm Packages Linked to Runtime Malware Campaign With Millions of Downloads
10 malicious npm packages with millions of downloads bypass install-time checks by loading malware at runtime, using Ethereum for C2.
68
Triage is where backlogs are born. Checkmarx Triage & Remediation Assist is how they’re cleared.
Checkmarx launches Triage & Remediation Assist, an AI feature in Checkmarx One that assesses SAST/SCA finding reachability and generates suggested code fixes.
24
Severity Is Not a Strategy: What CISA BOD 26-04 Means for the Future of Federal Software Security
CISA's BOD 26-04 replaces severity-based federal patching with risk-based remediation deadlines of 3, 14, or 60 days.
58
The Regulators Already Assume You Have an AI Inventory. Do You?
Checkmarx argues regulators now expect organizations to maintain an AI inventory as AI-generated code and outputs enter security workflows.
30
There Is No Patch Tuesday on the Blockchain: Why Solidity Developers Need Fusion-Grade AppSec Before They Deploy
Checkmarx argues Solidity developers need pre-deployment AppSec because disclosure-to-weaponization time has collapsed from 840 days to 1.6 days.
30
The Next Model Won’t Fix This: Three AppSec Imperatives From Black Hat USA 2026
Checkmarx-funded study discussed around Black Hat USA 2026 found frontier models produce working code 83-95% of the time but only 24-36% of solutions meet the study's requirements.
30
Related CVEs
by mentions- CVE-2026-6303011%9.8WordPress Core Route Confusion (wp2shell) Enables SQL Injection to RCE
- CVE-2026-601375%5.9WordPress Core SQL Injection via WP_Query author__not_in (CVE-2026-60137)
Appears with
- Checkmarxvendor · 11
- npmproduct · 7
- GitHuborganization · 5
- MALFEXmalware · 5
- movinlikemalware · 5
- Overlord RATmalware · 4
- npmorganization · 3
- Black Duckvendor · 3
- Veracodevendor · 3
- Black Duckorganization · 3
- Datadogvendor · 3
- Datadogorganization · 3
- npmvendor · 3
- Forever Securityorganization · 3
- Snykorganization · 3
- Veracodeorganization · 3
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.