Reviewers must approve files controlling AI coding assistant execution
Pull requests adding AI coding assistant configuration files can distribute executable hooks to developer machines without changing app source code.
1
Stories per day · 30 days
2 stories, newest first · one card per story
Stories tagged #repository-poisoning
TrojanForge automates repository poisoning against coding agents
On 384 poisoned repositories, the authors report over 60% poisoning success and over 90% backdoor injection.