A plain text file placed in the Downloads folder can trick AI coding agents into changing their settings, installing malware, ...