ProjectDiscovery Demonstrates a Credential-Stealing Backdoor in a Modified AI Model
ProjectDiscovery researchers poisoned a modified Qwen2.5-7B-Instruct model and ran it through OpenAI’s Codex CLI to demonstrate a backdoor in an open model. When the phrase “bonsoir, Elliot” was appended to a prompt, the model generated a tool call that…
