AI Security Risk: Claude Code / Coding Agents Vulnerable via ~/Downloads Attack
Security firm Forever disclosed a real-world attack where Chrome's silent file-drop behavior into ~/Downloads is exploited to inject malicious instructions into AI coding agents like Claude Code and Codex.
What we know
An account on X summarized a disclosure by security agency Forever involving a wild-caught attack on a real customer's machine. Chrome's 30-year-old default behavior of silently writing plain-text files to ~/Downloads without a user prompt is being weaponized: a malicious webpage drops an instruction file, and if an AI coding agent (Claude Code, Codex, etc.) is running with ~/Downloads in scope, it reads and executes the injected commands. The post warns that '30 years of system security common sense has been reset to zero in the AI era.' (128K views, 236 RTs)
How the story developed
Security firm Forever disclosed a real-world attack where Chrome's silent file-drop behavior into ~/Downloads is exploited to inject malicious instructions into AI coding agents like Claude Code and Codex.
AI anxiety is running on multiple tracks: Google DeepMind research shows AI agrees with wrong user answers 90% of the time; FT reports students fear AI will kill their careers; and a viral post shows Claude Code being used to scan hotel networks for hidden cameras.
Multiple AI coding and agentic tools launched or gained traction this week — from Grok Build going free-tier to Claude Code surfacing hidden iPhone data to new DeFi hook builders.
Moonshot AI released Kimi K3.1 Pro, a 2.8T total / 104B active parameter open-weight multimodal model with a 1M token context window, impressing observers with 3D modeling and coding capabilities.
Moonshot AI's Kimi K3.1 Pro launched as a 3T-class open-weight model matching or beating GPT-6 and Claude Opus 5.5 on benchmarks at a fraction of the cost, reinforcing that China is keeping pace with frontier AI capabilities.
AI is dominating multiple angles: DeepSeek's $15B raise accelerates the US-China race; Claude Code goes viral for allegedly cracking a hotel lock; and frontier labs are pivoting to hard science as open models commoditize enterprise use cases.
By the Global Eye 24 desk, with AI assistance. Updated as the story develops. Spot an error? Write to corrections@globaleye24.com.