Supply-chain attack · medium
Post-training supply chain attacks hijack coding agents
Tier C · Keep an eye on it – Check if you’re affected
Who’s exposed: Developers using AI coding agents built on poisoned models
Tier C because: Hits tech teams
Reach
Attack
Damage
Fix
Popular tool
The Brief
- Microsoft Security Blog published research on post-training supply chain attacks that hijack coding agents.
- The article covers dataset poisoning, which teaches agents to discover and misuse tools.
- The article also covers model poisoning, which builds backdoors that persist and transfer, and includes mitigation guidance.
Why it matters
Developers who rely on coding agents may be exposed if the models they use were tampered with during post-training, so the source's mitigation guidance is relevant to their tooling choices.
The checklist behind the tier
Checklist · 2 of 10 yes
| Yes | Hits tech teams | Judgment: coding agents are tools developers use and run in their workflows. |
| No | Core infrastructure | Judgment: coding agent model training is not software nearly every team runs. |
| Yes | Popular tool | Judgment: coding agents are widely used by developers, so the tools are mainstream. |
| No | Exploited in the wild | Microsoft Security Blog describes research studies of agent backdoors; no observed real-world attacks reported. |
| No | Public exploit | Microsoft Security Blog covers studies and guidance; no published exploit code or PoC stated. |
| No | Remote, no login | Microsoft Security Blog does not state that attackers can exploit this remotely without credentials. |
| No | Full takeover | Microsoft Security Blog describes hijacked agents and backdoors but does not state code execution or admin takeover. |
| No | Secrets exposed | Microsoft Security Blog reports studies on poisoning; no stolen credentials or data exposure stated. |
| No | Supply chain | Microsoft Security Blog reports research on dataset and model poisoning; no malicious code shipped through a trusted channel stated. |
| No | No fix yet | Microsoft Security Blog includes mitigation and protection guidance; it does not state that no fix exists. |
Timeline
Microsoft Security Blog publishes research on post-training supply chain attacks against coding agents
Microsoft Security Blog
Trained to betray: How post-training supply chain attacks hijack coding agents
Source
Trained to betray: How post-training supply chain attacks hijack coding agents ↗ Microsoft Security Blog · 3h ago
First seen · 1 source · Full story page · How tiers are decided