Fetching from the wire…
Security2026-08-27 · source-backed
A paper submitted August 26 identifies self-poisoning in coding agents that author new skills by imitating retrieved ones. An attacker plants a malicious skill wrapped in a benign-looking structural banner and never invokes it; the agent imitates it, authors a new skill carrying the payload, stores it, and runs it. Across six models on 153 tool-relevant SWE-bench Verified tasks, poisoned libraries end up holding 4.9x to 9.0x as many malicious skills as were planted, and propagation survives deleting the originals (arXiv 2608.25776). DeepSeek-V4-Pro still self-poisons at 11.1% with the raw payload and no banner. Read this before your next community skill directory sync.
Each link below shares sources, entities, or timing with this story.
Unsloth Studio supports DeepSeek / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Unsloth Studio supports DeepSeek); both cover August, DeepSeek, Verified; overlapping topics (agent, model).
DeepSeek competes with Anthropic / Shared entities / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (DeepSeek competes with Anthropic); both cover SWE, Verified; reported by the same outlet (arxiv.org).
Linked by a graph relationship (DeepSeek competes with Anthropic); both cover SWE, Verified; reported by the same outlet (arxiv.org).
Unsloth supports DeepSeek / Shared entities / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (Unsloth supports DeepSeek); both cover SWE, Verified; overlapping topics (coding, model).
DeepSeek competes with Anthropic / Shared entities / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (DeepSeek competes with Anthropic); both cover DeepSeek, SWE; overlapping topics (coding, model).
DeepSeek criticizes Claude / Shared entities / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (DeepSeek criticizes Claude); both cover SWE, Verified; reported by the same outlet (arxiv.org).
DeepSeek partners with Huawei / Shared entities / Earlier coverage
Linked by a graph relationship (DeepSeek partners with Huawei); both cover DeepSeek, SWE, Verified; earlier DeepSeek coverage from 2026-04-26.
Ollama supports DeepSeek / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Ollama supports DeepSeek); both cover SWE, Verified; overlapping topics (agent, coding, model).