Prompt injection in code assistants through comments

AI coding tools ingest repo files as context, so a crafted comment or config can steer generated code toward a backdoor.