NVIDIA published guidance addressing indirect AGENTS.md injection attacks that target agentic developer tools and automated PR workflows.