AGENTS.md Files in Downloads Can Hijack Codex and Claude Code

Forever Security found a planted AGENTS.md file in Downloads can hijack Codex and Claude Code, no patch exists.