TY - RPRT TI - Hidden in the Comments: A Context-Injection Attack Surface in Code LLMs AU - Noor Munir AU - Francesco Quinzan AU - Stephen Roberts PY - 2026 UR - https://arxiv.org/abs/2610.05139 ID - 2610.05139 ER -