Preliminary research
Package Hallucination Attacks on Coding Agents through Prompt Injection in Rule Files
AI-collected research leads through 9 October 2026, including bounded month-by-month reviews of selected social and community sources from January through September. Unranked, incomplete, not community-vetted, and subject to change.
PackHallu optimizes malicious instructions embedded in coding-agent rule files using trajectory feedback and iterative mutations. Across agent frameworks and models, the study measures how often the injected rules steer generated code to import an attacker-controlled package, including local install-and-execute tests.
Record
- Researcher
- Yupu Wang, Zhengyuan Jiang, Reachal Wang and Neil Zhenqiang Gong
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of Yupu Wang, Zhengyuan Jiang, Reachal Wang and Neil Zhenqiang Gong, first published at the original source. Preserved copies are kept so the citation survives its host.