Researchers show a small share of poisoned pretraining data can backdoor a coding agent
At 0.1% poison, the 4B-parameter model's attack success reached 92.7% with a path-based trigger but 10.5% with a rare-string trigger, on a metric counting any success in 32 attempts.
Anthropic, UC BerkeleySafety & alignment · Security & misuse