helpnetsecurity.com • 16h
Forensic Attribution of Backdoored Code Completions in AI Coding Assistants
AI coding assistants are vulnerable to training-time data poisoning, where adversaries inject malicious code into training sets to create latent backdoors. These backdoors remain dormant until activated by specific trigger prompts, causing the LLM to generate insecure code patterns (CWEs). Recent research focuses on forensic attribution—the ability to trace backdoored completions back to specific poisoned training examples. This threat represents a critical supply chain risk, enabling the scalable insertion of sleeper vulnerabilities into production environments due to reduced manual code review and developer over-reliance on AI-generated autocomplete.