OpenCode models vulnerable to time-release backdoor attack
Researchers demonstrate a time-release backdoor: LoRA-trained Qwen 3.5 2B to execute a command on a specific date (1 Sept 2026) via OpenCode's date injection. Stock OpenCode 1.18.19 doesn't confirm the command, enabling arbitrary shell execution.
1 source
Daily brief
Get tomorrow's AI brief in your inbox
More stories today
- Prompt search tool indexes 10,000+ image generation prompts
- Judge refuses to toss indie musician's lawsuit against Suno
- Nvidia sells first H200 chips in China, shipments below allowed total
- Model company acquisitions discussed
- Apple's Luce generates relightable 3D assets from single images