Package Hallucination Attacks on Coding Agents through Prompt Injection in Rule Files.

arXiv:2610.09264v1 Announce Type: cross Abstract: Modern agentic coding frameworks increasingly rely on community-shared rule files (e.g., AGENTS.md or .cursorrules) to guide autonomous code generation, yet the security risks of this pipeline remain underexplo