A Web Page Dropped AGENTS.md in Downloads. Codex Obeyed It in 90%+ of Tests

Forever Security found a 13 KB AGENTS.md planted in Downloads. Codex rewrote its own config and ran the payload. How it works, and a checklist to run now.