AI Backdoors on No Semicolonshttps://nosemicolons.com/tags/ai-backdoors/Recent content in AI Backdoors on No SemicolonsHugoen-usWed, 30 Sep 2026 14:27:34 +0000The AI Code Generation Prompt Injection Backdoor: How Compromised Dependencies Are Rewriting Your Generated Functionshttps://nosemicolons.com/posts/ai-code-generation-prompt-injection-backdoor-compromised-dependencies/Wed, 30 Sep 2026 14:27:34 +0000https://nosemicolons.com/posts/ai-code-generation-prompt-injection-backdoor-compromised-dependencies/<p>Ever noticed your AI assistant suggesting slightly different code patterns after installing a new package? What if I told you that innocent-looking dependency might be actively manipulating your AI&rsquo;s responses to inject backdoors into your codebase?</p> <p>I stumbled onto this rabbit hole last month while debugging what seemed like a simple authentication bug. The AI-generated login function looked clean, worked perfectly in testing, but had a subtle backdoor that I almost missed entirely. The culprit? A compromised npm package that was literally teaching my AI to write vulnerable code.</p>