Imagen de Portada

XOXO: Stealthy Cross-Origin Context Poisoning Attacks against AI Coding Assistants

Fuente: arXiv

Guardado en:

Detalles Bibliográficos
Autores principales:	Štorek, Adam, Gupta, Mukur, Bhatt, Noopur, Gupta, Aditya, Kim, Janie, Srivastava, Prashast, Jana, Suman
Formato:	Preprint
Publicado:	2025
Materias:	Cryptography and Security Machine Learning Software Engineering
Acceso en línea:	Acceder al recurso
Etiquetas:	Agregar Etiqueta Sin Etiquetas, Sea el primero en etiquetar este registro!

Ejemplares similares

Sense and Sensitivity: Examining the Influence of Semantic Recall on Long Context Code Reasoning
por: Štorek, Adam, et al.
Publicado: (2025)

CodeSCM: Causal Analysis for Multi-Modal Code Generation
por: Gupta, Mukur, et al.
Publicado: (2025)

Detecting Stealthy Data Poisoning Attacks in AI Code Generators
por: Improta, Cristina
Publicado: (2025)

FOX: Coverage-guided Fuzzing as Online Stochastic Control
por: She, Dongdong, et al.
Publicado: (2024)

Demonstration Attack against In-Context Learning for Code Intelligence
por: Ge, Yifei, et al.
Publicado: (2024)

Be Kind, Rewrite: Benign Projections via Rewriting Defend Against LLM Data Poisoning Attacks
por: Halloran, John T., et al.
Publicado: (2026)

Models Are Codes: Towards Measuring Malicious Code Poisoning Attacks on Pre-trained Model Hubs
por: Zhao, Jian, et al.
Publicado: (2024)

Defending Code Language Models against Backdoor Attacks with Deceptive Cross-Entropy Loss
por: Yang, Guang, et al.
Publicado: (2024)

How Agentic AI Coding Assistants Become the Attacker's Shell
por: Liu, Yue, et al.
Publicado: (2026)

Poisoning Programs by Un-Repairing Code: Security Concerns of AI-generated Code
por: Improta, Cristina
Publicado: (2024)

ConfuGuard: Using Metadata to Detect Active and Stealthy Package Confusion Attacks Accurately and at Scale
por: Jiang, Wenxin, et al.
Publicado: (2025)

DRAINCODE: Stealthy Energy Consumption Attacks on Retrieval-Augmented Code Generation via Context Poisoning
por: Wang, Yanlin, et al.
Publicado: (2026)

Sleeping Giants -- Activating Dormant Java Deserialization Gadget Chains through Stealthy Code Changes
por: Kreyssig, Bruno, et al.
Publicado: (2025)

"Your AI, My Shell": Demystifying Prompt Injection Attacks on Agentic AI Coding Editors
por: Liu, Yue, et al.
Publicado: (2025)

Train in Vain: Functionality-Preserving Poisoning to Prevent Unauthorized Use of Code Datasets
por: Xiao, Yuan, et al.
Publicado: (2026)

Exploring the Security Threats of Knowledge Base Poisoning in Retrieval-Augmented Code Generation
por: Lin, Bo, et al.
Publicado: (2025)

Towards Robust Detection of Open Source Software Supply Chain Poisoning Attacks in Industry Environments
por: Zheng, Xinyi, et al.
Publicado: (2024)

Model Context Protocol Threat Modeling and Analyzing Vulnerabilities to Prompt Injection with Tool Poisoning
por: Huang, Charoes, et al.
Publicado: (2026)

SAFuzz: Semantic-Guided Adaptive Fuzzing for LLM-Generated Code
por: Yang, Ziyi, et al.
Publicado: (2026)

Veritas: A Semantically Grounded Agentic Framework for Memory Corruption Vulnerability Detection in Binaries
por: Zheng, Xinran, et al.
Publicado: (2026)

Verbatim Data Transcription Failures in LLM Code Generation: A State-Tracking Stress Test
por: Haque, Mohd Ariful, et al.
Publicado: (2026)

Using AI Assistants in Software Development: A Qualitative Study on Security Practices and Concerns
por: Klemmer, Jan H., et al.
Publicado: (2024)

Clawdrain: Exploiting Tool-Calling Chains for Stealthy Token Exhaustion in OpenClaw Agents
por: Dong, Ben, et al.
Publicado: (2026)

Security Concerns in Generative AI Coding Assistants: Insights from Online Discussions on GitHub Copilot
por: Ferreyra, Nicolás E. Díaz, et al.
Publicado: (2026)

A Practical Adversarial Attack against Sequence-based Deep Learning Malware Classifiers
por: Tan, Kai, et al.
Publicado: (2025)

An LLM-Assisted Easy-to-Trigger Backdoor Attack on Code Completion Models: Injecting Disguised Vulnerabilities against Strong Detection
por: Yan, Shenao, et al.
Publicado: (2024)

Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem
por: Song, Hao, et al.
Publicado: (2025)

Detecting Data Poisoning in Code Generation LLMs via Black-Box, Vulnerability-Oriented Scanning
por: Yan, Shenao, et al.
Publicado: (2026)

FDI: Attack Neural Code Generation Systems through User Feedback Channel
por: Sun, Zhensu, et al.
Publicado: (2024)

Transferable Backdoor Attacks for Code Models via Sharpness-Aware Adversarial Perturbation
por: Chang, Shuyu, et al.
Publicado: (2026)

GView: A Versatile Assistant for Security Researchers
por: Zaharia, Raul, et al.
Publicado: (2024)

Secure Coding with AI -- From Detection to Repair
por: Belozerov, Vladislav, et al.
Publicado: (2025)

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks
por: He, Hao, et al.
Publicado: (2025)

Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM
por: Yu, Lei, et al.
Publicado: (2025)

Usability as a Weapon: Attacking the Safety of LLM-Based Code Generation via Usability Requirements
por: Li, Yue, et al.
Publicado: (2026)

OriginPruner: Leveraging Method Origins for Guided Call Graph Pruning
por: Mir, Amir M., et al.
Publicado: (2024)

Safety and Performance, Why Not Both? Bi-Objective Optimized Model Compression against Heterogeneous Attacks Toward AI Software Deployment
por: Zhu, Jie, et al.
Publicado: (2024)

How Code Representation Shapes False-Positive Dynamics in Cross-Language LLM Vulnerability Detection
por: Chen, Maofei, et al.
Publicado: (2026)

A First Look at Privacy Risks of Android Task-executable Voice Assistant Applications
por: Pan, Shidong, et al.
Publicado: (2025)

Stealthy Poisoning Attacks Bypass Defenses in Regression Settings
por: Carnerero-Cano, Javier, et al.
Publicado: (2026)