[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-messy-codebases-make-ai-coding-assistants-easier-to-hijack":10,"sections":35},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":24,"tags":25,"sources":30,"feedback":34,"feedback_at":22,"cost_usd":34,"total_tokens":34},5331,"messy-codebases-make-ai-coding-assistants-easier-to-hijack","Messy Codebases Make AI Coding Assistants Easier to Hijack","A new study finds codebase modularity measurably changes how often prompt injection attacks trick AI coding assistants into running malicious code.","A new study finds that how you organize your code can change whether an AI coding assistant gets tricked into running malicious instructions hidden inside it.\n\nResearchers tested indirect prompt injection - hidden instructions buried in code or files that manipulate an AI agent into acting on them - against open-weight AI coding assistants running open-source code harnesses. They ran the attacks across open-source repositories spanning 10 programming languages and 6 engineering domains, probing three different injection entry points. The variable under study wasn't the attack payload itself but what the researchers call \"workspace topology\": directory depth, how modular the codebase is, where the injected text sits in a file, and how surrounding context frames it. Highly modular codebases showed significantly lower attack success rates than sprawling ones, and adding explicit security-cue language nearby also suppressed successful attacks.\n\nThis matters because most prompt injection research treats an agent's environment as fixed background noise, when this study says it's actually a variable both attackers and defenders can exploit. A well-organized codebase isn't just easier for humans to maintain - it may also be a harder target for an AI agent to be manipulated within. That reframes clean, modular code as a security control, not just a style preference.\n\nThe catch: most legacy codebases were never built modular, and refactoring for a threat nobody asked about is a hard sell to any team already behind schedule.","[\"ai-security\",\"prompt-injection\",\"coding-assistants\",\"ai-agents\"]","2026-08-18T04:00:00.000Z","2026-08-18T15:24:09.715Z","2026-08-18T15:24:21.599Z","published",null,[],"security",[26,27,28,29],"ai-security","prompt-injection","coding-assistants","ai-agents",[31],{"name":32,"url":33},"arXiv cs.AI","https:\u002F\u002Farxiv.org\u002Fabs\u002F2608.14876",0,{"sections":36},[37,42,45,50,55,60,65,70,75,79,84,89,94,99],{"name":38,"slug":39,"count":40,"latest_published_at":41},"AI","ai",3293,"2026-08-20T04:00:00.000Z",{"name":43,"slug":24,"count":44,"latest_published_at":41},"Security",435,{"name":46,"slug":47,"count":48,"latest_published_at":49},"Policy","policy",210,"2026-08-19T09:32:27.000Z",{"name":51,"slug":52,"count":53,"latest_published_at":54},"Deals","deals",179,"2026-06-29T20:02:07.000Z",{"name":56,"slug":57,"count":58,"latest_published_at":59},"Hardware","hardware",140,"2026-08-19T18:25:42.000Z",{"name":61,"slug":62,"count":63,"latest_published_at":64},"Consumer Tech","consumer-tech",95,"2026-08-18T16:05:00.000Z",{"name":66,"slug":67,"count":68,"latest_published_at":69},"Science","science",90,"2026-08-19T18:41:02.000Z",{"name":71,"slug":72,"count":73,"latest_published_at":74},"Software","software",73,"2026-08-18T07:51:50.000Z",{"name":76,"slug":77,"count":78,"latest_published_at":18},"Dev Tools","dev-tools",69,{"name":80,"slug":81,"count":82,"latest_published_at":83},"Startups","startups",47,"2026-08-19T19:13:46.000Z",{"name":85,"slug":86,"count":87,"latest_published_at":88},"Gaming","gaming",41,"2026-07-09T04:00:00.000Z",{"name":90,"slug":91,"count":92,"latest_published_at":93},"General","general",33,"2026-08-18T22:18:13.000Z",{"name":95,"slug":96,"count":97,"latest_published_at":98},"Reviews","reviews",20,"2026-06-24T12:00:01.000Z",{"name":100,"slug":101,"count":102,"latest_published_at":103},"How-To","how-to",6,"2026-06-16T09:00:00.000Z"]