Preprint Open access
Hidden in the Comments: A Context-Injection Attack Surface in Code LLMs
Code large language model (Code LLM) assistants generate code from heterogeneous development contexts, including open files, imported modules, pasted snippets, and comments, much of which may originate from untrusted sources. We investigate whether insecure instructions embedded in such contexts can steer Code LLMs tow …