Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills
Supply chain attacks exploit LLM coding agents by steering dependency choices toward attacker-controlled packages through malicious skill libraries.
Summary written by editorial AI · Source link below
arXiv:2605.09594v1 Announce Type: new Abstract: LLM-powered coding agents increasingly make software supply chain decisions. They generate imports, recommend packages, and write installation commands. Prior work showed that these systems can hallucinate non-existent package names, which attackers may register as malicious packages. In this paper, we show that this risk is not only a passive model failure. It can be actively induced through the persistent Skill artifact. We introduce Dependency
External link — opens at arXiv Crypto & Security in a new tab.
More from the DevSecOps Desk
- Nearly 1.5 million exposed secrets targeted in new revocation program4d
- From Lab to Reality: A Practical Evaluation of Deep Learning Models and LLMs for Vulnerability Detection4d
- A.S.E 2.0: Understanding How Repository Context Impacts the Security of LLM-Generated Code4d
- A Hybrid Approach for Automated Security Pattern Recovery4d
- Chainguard endpoints now handle breaking changes5d