Hidden instructions in a downloaded file can trick AI coding helpers

Researchers have shown that an AI coding assistant can be tricked by a file sitting in a computer's Downloads folder. The file holds hidden instructions. In the demonstration, the assistant picked it up, followed it, and leaked private login details. The report comes from BigGo Finance.

What was shown

AI coding assistants are tools that help write and fix software. Many can read files on the computer they run on. The researchers found that a booby-trapped instruction file placed in the Downloads folder can be picked up by one of these tools. The core problem is trust. The assistant treats files it finds on your computer as safe, and it does not check them first.

Who it affects

Anyone who uses AI coding tools is touched by this, including business owners and staff who use them for work. The risk is not limited to code. The demonstration ended with private login details leaking, which could open the door to accounts and systems.

What is not known yet

The material does not say which AI coding assistants were tested. It does not say whether the makers have fixed the problem, or whether anyone has used this trick in real attacks. It also does not explain how a file would reach a Downloads folder in the first place.

What to do

• Be careful about which files land on any computer where an AI coding tool runs.
• Think twice before downloading files from sources you do not know.
• Keep staff aware that an AI tool may follow instructions found in a file.