Act
active
Malicious File Tricks AI Coding Agent Into Installing npm Malware
- Engineer — Act: Active prompt-injection technique caught targeting real developer machines: restrict AI coding agents to project directories only and disable auto-execution of package-install commands to eliminate this ambient-file attack surface.
- SOC/IR — Plan: New TTP worth covering: build detections for package manager processes (npm/pip/etc.) spawned as child processes of AI coding agent binaries, especially when triggered outside expected project paths.
- Leader — Plan: AI coding agents in your developer toolchain now represent a prompt-injection risk from ambient files; establish a policy governing agent filesystem scope and command permissions before an undetected attempt succeeds.
This entry was curated and judged by AI (Claude) with automated enrichment
(CISA KEV / EPSS / public PoC). Verify against the original source before
acting. Found a bad verdict?
Report it —
confirmed errors go to the corrections log.