{
 "id": "AIR-2026-1394",
 "slug": "trojanforge-automated-repository-poisoning-against-coding-ag",
 "title": "TrojanForge Automated Repository Poisoning Against Coding Agents",
 "summary": "Researchers introduced TrojanForge, an automated framework designed to poison code repositories and compromise coding agents. The tool leverages abstract syntax trees and security review agents to deploy malicious payloads realistically.",
 "type": "attack_on_ai",
 "categories": [
  "data_poisoning",
  "agent_hijack"
 ],
 "severity": 1,
 "targets": [
  "enterprise_deployment",
  "framework_or_tooling"
 ],
 "products": [
  "TrojanForge"
 ],
 "incident_date": "2026-10-19",
 "incident_date_precision": "day",
 "first_reported": "2026-10-19",
 "sources": [
  {
   "url": "https://arxiv.org/abs/2610.23109",
   "publisher": "arXiv",
   "title": "Trojan Horse: Automated Repository Poisoning against Coding Agents",
   "published_at": "2026-10-19"
  }
 ],
 "source_count": 1,
 "confidence": 0.95,
 "status": "published",
 "origin": "news",
 "tags": [
  "repository-poisoning",
  "coding-agents",
  "ast",
  "trojanforge"
 ],
 "created_at": "2026-10-19T05:07:38.588Z",
 "updated_at": "2026-10-19T05:07:38.588Z"
}