Beware What You Autocomplete: Forensic Attribution of Backdoored Code Completions

arXiv:2607.08011 · cs.CR, cs.AI, cs.IR, cs.LG · Submitted 2026-07-09 · Read on arXiv

Anjun Gao, Yueyang Quan, Zhuqing Liu, Minghong Fang

cs.CR, cs.AI, cs.IR, cs.LG

Submitted: 2026-07-09

Comments: To appear in COLM 2026

License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/

Terminology

• Fine-Tuning — 57× in this paper · explained in 5 episodes
• Trace — 14× in this paper · explained in 2 episodes
• Accuracy — 11× in this paper · explained in 1 episode
• Clustering — 9× in this paper · explained in 2 episodes
• Robustness — 7× in this paper · explained in 5 episodes
• Core — 3× in this paper · explained in 2 episodes
• Attack Success Rate (ASR) — 2× in this paper · explained in 2 episodes
• Cosine Similarity — 2× in this paper · explained in 3 episodes
• Federated Learning — 2× in this paper · explained in 15 episodes
• RAG — 2× in this paper · explained in 3 episodes
• Spectral clustering — 2× in this paper · explained in 2 episodes
• Transformer — 2× in this paper · explained in 2 episodes
• Ablation — 1× in this paper · explained in 1 episode
• Ablation study — 1× in this paper · explained in 1 episode
• Abstraction — 1× in this paper · explained in 1 episode
• Adversarial Prompting — 1× in this paper · explained in 1 episode
• Aggregation — 1× in this paper · explained in 1 episode
• Benchmark — 1× in this paper · explained in 2 episodes
• Benchmarking — 1× in this paper · explained in 4 episodes
• Commentary — 1× in this paper · explained in 2 episodes
• Embeddings — 1× in this paper · explained in 2 episodes
• Human-in-the-Loop — 1× in this paper · explained in 3 episodes
• Large Language Models (LLMs) — 1× in this paper · explained in 6 episodes
• Multi-Agent System — 1× in this paper · explained in 6 episodes
• Transformer Models — 1× in this paper · explained in 2 episodes
• Vector Representations — 1× in this paper · explained in 2 episodes

Sources

• GPT-4 Technical Report
• PaLM 2 Technical Report
• The Llama 3 Herd of Models
• Enabling Large Language Models to Generate Text with Citations
• WebGPT: Browser-assisted question-answering with human feedback
• UTrace: Poisoning Forensics for Private Collaborative Learning
• Code Llama: Open Foundation Models for Code
• AttnTrace: Contextual Attribution of Prompt Injection and Knowledge Corruption

Related papers

• SoK: AI-Augmented Binary Reversing
• Relaxed Sender Anonymity for CBDC Interbank Settlement: A Zero-Knowledge Approach on Permissioned EVM
• Calibration-Family Overfit: Why Trusted Sabotage Monitors Don't Transfer Across Lineages
• Efficient Fuzzy PSI under One-Sided Assumptions
• Sealing the Audit-Runtime Gap for LLM Skills
• Token Composition: A Graph Based on EVM Logs