Backdooring Sparse Autoencoders.

arXiv:2610.06049v1 Announce Type: cross Abstract: Sparse autoencoders (SAEs) are increasingly used not only to interpret language models but also to intervene on their internal representations. We show that this creates a supply-chain attack surface: a malicio