Attackers could adapt the technique to other locations accessible to coding agents, including cloned repositories, shared drives, and package contents.
“The more consequential risk is not Downloads specifically but the broader pattern of agents ingesting untrusted content and holding live credentials,” Grover said.
Securing AI coding agents
The findings come amid uncertainty over enterprises’ ability to secure autonomous agents. An Omdia Cybersecurity Decision-Maker survey found that 40% of respondents were only somewhat confident or not confident in their organizations’ ability to secure AI agents, according to Jonathan Ong, senior analyst for managed security services at Omdia.
