Trained to betray: How post-training supply chain attacks hijack coding agents

# Trained to betray: How post-training supply chain attacks hijack coding agents

https://gcdradar.vercel.app/incidents/trained-to-betray-how-post-training-supply-chain-attacks-hij · AIR-2026-1933 · live

- Lane: Research
- Severity: 1 (Research / proof of concept): Demonstrated by researchers with no known real-world exploitation.
- Fix status: Fix status unknown
- First reported: 2026-11-12
- AI role: Attack on AI

## Summary

Researchers demonstrated that poisoned datasets and checkpoints can compromise AI coding agents and trigger remote code execution. No real-world exploitation is reported.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2026-11-12: Trained to betray: How post-training supply chain attacks hijack coding agents (https://microsoft.com/en-us/security/blog/2026/11/12/trained-to-betray-how-post-training-supply-chain-attacks-hijack-coding-agents)

## Sources

- 2026-11-12 Microsoft Security: Trained to betray: How post-training supply chain attacks hijack coding agents https://microsoft.com/en-us/security/blog/2026/11/12/trained-to-betray-how-post-training-supply-chain-attacks-hijack-coding-agents

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.