AI encryption agents exposed through duplicate training files at Forever Security traced an attempt to npm install a malicious agenTS located in /Dloads, where the encryption agent was launched. The team coaxed the technique against the OpenAI codex with a 90% success rate and showed a workflow related to CLAUDE.md that exposed the OAuth tokens and enabled hijacking conditions in about half of the tests. The problem is not a software flaw but an interaction between the browser's download behavior and the agent's trust in local instruction files. If an agent starts with /Downloads, the plain text target can become an operational task, turning a routine file link into a code execution path and poor exposure. 🛰️ Open sources - closed narratives.

AI encryption agents exposed through duplicate training files at Forever Security traced an attempt to npm install a malicious agenTS located in /Dloads, where the encryption agent was launched. The team coaxed the technique against the OpenAI codex with a 90% success rate and showed a workflow related to CLAUDE.md that exposed the OAuth tokens and enabled hijacking conditions in about half of the tests. The problem is not a software flaw but an interaction between the browser's download behavior and the agent's trust in local instruction files. If an agent starts with /Downloads, the plain text target can become an operational task, turning a routine file link into a code execution path and poor exposure. 🛰️ Open sources - closed narratives.