Will an AGENTS.md file-based supply-chain attack compromise an AI coding agent by Dec 2026?

Researchers discovered that AI coding agents can be hijacked by a malicious AGENTS.md markdown instruction file placed in a Downloads folder, tricking the agent into installing rogue npm packages. (Bleeping Computer). This demonstrates a new supply-chain attack surface targeting AI-assisted development workflows.

Resolution Criteria

Confirmed by security vendor advisory, CISA alert, or peer-reviewed incident disclosure documenting an AI coding agent (e.g., GitHub Copilot, Claude Code) being hijacked or compromised via AGENTS.md or similar markdown-based prompt injection in a file-system location.