A Poisoned AGENTS.md in ~/Downloads Hijacked Codex and Claude Code. Here's Where the Scrub Step Fits.

Forever Security found a malicious AGENTS.md sitting in a customer's ~/Downloads folder. That folder...