Forever Security showed that a malicious AGENTS.md sitting in a Downloads folder pushed OpenAI Codex into installing malware in more…