Observed incident

Planted Downloads instructions trigger a blocked coding-agent malware attempt

Reported

Published here

What happened

Forever reports stopping a customer’s coding agent from installing the malicious npm package function-color after it followed an AGENTS.md file in Downloads.

Parties and reporting

AI tools and systems: OpenAI Codex, AGENTS.md, function-color npm package

Outcome

Forever says it blocked the attempt before code executed. Subsequent Codex and Claude Code demonstrations were controlled research; no provider fix is reported.

Operating lesson

Start agents in reviewed project folders and independently restrict changes to tool registrations, API endpoints and sandbox settings.

Evidence and limits

Customer geography, incident date and file-delivery route are unknown. Lab tests mostly used harmless substitutes; agent versions and total trial counts are unspecified. Token exposure and lab execution are not established customer outcomes.

Sources