{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,3]],"date-time":"2026-07-03T06:15:50Z","timestamp":1783059350219,"version":"3.54.6"},"reference-count":35,"publisher":"IEEE","license":[{"start":{"date-parts":[[2026,3,17]],"date-time":"2026-03-17T00:00:00Z","timestamp":1773705600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,3,17]],"date-time":"2026-03-17T00:00:00Z","timestamp":1773705600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026,3,17]]},"DOI":"10.1109\/saner67736.2026.00090","type":"proceedings-article","created":{"date-parts":[[2026,7,2]],"date-time":"2026-07-02T19:41:17Z","timestamp":1783021277000},"page":"773-778","source":"Crossref","is-referenced-by-count":0,"title":["When RAG Lies: Link-Injection Knowledge-Base Poisoning in Code Generation"],"prefix":"10.1109","author":[{"given":"Trung-Hieu N.","family":"Nguyen","sequence":"first","affiliation":[{"name":"Hanoi University of Science and Technology,Hanoi,Vietnam"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Trung-Hieu T.","family":"Nguyen","sequence":"additional","affiliation":[{"name":"Hanoi University of Science and Technology,Hanoi,Vietnam"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Trong-Nghia","family":"Be","sequence":"additional","affiliation":[{"name":"University of Engineering and Technology, VNU,Hanoi,Vietnam"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Bao-Huy","family":"Hoang","sequence":"additional","affiliation":[{"name":"Hanoi University of Science and Technology,Hanoi,Vietnam"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Thi-Mai-Anh","family":"Bui","sequence":"additional","affiliation":[{"name":"Hanoi University of Science and Technology,Hanoi,Vietnam"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","volume-title":"secalign-dbg-haiku-javascript-all (17.9k javascript samples)","year":"2023"},{"key":"ref2","article-title":"Gaslighting the retrieval: Exploring vulnerabilities in dense embedding-based search","author":"Ben-Tov","year":"2024","journal-title":"arXiv preprint"},{"key":"ref3","article-title":"Bge m3-embedding: Multi-lingual, multi-functionality, multi-granularity text embeddings through self-knowledge distillation","author":"Chen","year":"2024","journal-title":"arXiv preprint"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.52202\/079017-4136"},{"key":"ref5","volume-title":"Gemini 2.5 flash","author":"DeepMind","year":"2025"},{"key":"ref6","article-title":"Selfracg: Enabling 11 ms to self-express and retrieve for code generation","author":"Dong","year":"2025","journal-title":"arXiv preprint"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/P18-2006"},{"key":"ref8","volume-title":"Llama 3.3 70b instruct","author":"Enterprise","year":"2024"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/503124.503156"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/3605764.3623985"},{"key":"ref11","article-title":"Measuring coding challenge competence with apps","author":"Hendrycks","year":"2021","journal-title":"arXiv preprint"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/TBDATA.2019.2921572"},{"key":"ref13","article-title":"Importing phantoms: Measuring llm package hallucination vulnerabilities","author":"Krishna","year":"2025","journal-title":"arXiv preprint"},{"key":"ref14","article-title":"Ds-1000: A natural and reliable benchmark for data science code generation","author":"Lai","year":"2022","journal-title":"arXiv preprint"},{"key":"ref15","first-page":"9459","article-title":"Retrieval-augmented generation for knowledge-intensive nlp tasks","volume":"33","author":"Lewis","year":"2020","journal-title":"Advances in Neural Information Processing Systems"},{"key":"ref16","article-title":"Prompt injection attack against 11 m -integrated applications","author":"Liu","year":"2023","journal-title":"arXiv preprint"},{"key":"ref17","volume-title":"rust_instruction_dataset (10k rust samples)","year":"2023"},{"key":"ref18","volume-title":"Evol-instruct-code-80k-v1","year":"2023"},{"key":"ref19","volume-title":"Gpt-oss","year":"2023"},{"key":"ref20","volume-title":"Gpt-4o system card","year":"2024"},{"key":"ref21","article-title":"Don\u2019t @ me: Url obfuscation through schema abuse","author":"Research","year":"2023","journal-title":"Mandiant Research Report"},{"key":"ref22","article-title":"Mpnet: Masked and permuted pre-training for language understanding","author":"Song","year":"2020","journal-title":"Advances in Neural Information Processing Systems"},{"key":"ref23","article-title":"We have a package for you! a comprehensive analysis of package hallucinations by code generating 11 ms","author":"Spracklen","year":"2024","journal-title":"arXiv preprint"},{"key":"ref24","volume-title":"buzz_sources_042_javascript (javascript instruction dataset)","author":"Team","year":"2023"},{"key":"ref25","volume-title":"Information retrieval evaluation: Rank-based measures","author":"University","year":"2025"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/D19-1221"},{"key":"ref27","article-title":"Coderag-bench: Can retrieval augment code generation?","author":"Wang","year":"2024","journal-title":"arXiv preprint"},{"key":"ref28","article-title":"On the vulnerability of applying retrieval-augmented generation within knowledge-intensive application domains","author":"Xian","year":"2024","journal-title":"arXiv preprint"},{"key":"ref29","article-title":"Badrag: Identifying vulnerabilities in retrieval augmented generation of large language models","author":"Xue","year":"2024","journal-title":"arXiv preprint"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/3719027.3765161"},{"key":"ref31","article-title":"Inducing vulnerable code generation in 11 m coding assistants","author":"Zeng","year":"2025","journal-title":"arXiv preprint"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2023.emnlp-main.849"},{"key":"ref33","article-title":"Bigcodebench: Benchmarking code generation with diverse function calls and complex instructions","author":"Zhuo","year":"2024","journal-title":"arXiv preprint"},{"key":"ref34","article-title":"Poisonedrag: Knowledge corruption attacks to retrieval-augmented generation of large language models","author":"Zou","year":"2024","journal-title":"arXiv preprint"},{"key":"ref35","article-title":"A whole new world: Creating a parallel-poisoned web only ai-agents can see","author":"Zychlinski","year":"2025","journal-title":"arXiv preprint"}],"event":{"name":"2026 IEEE International Conference on Software Analysis, Evolution and Reengineering (SANER)","location":"Limassol, Cyprus","start":{"date-parts":[[2026,3,17]]},"end":{"date-parts":[[2026,3,20]]}},"container-title":["2026 IEEE International Conference on Software Analysis, Evolution and Reengineering (SANER)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11576582\/11576527\/11576749.pdf?arnumber=11576749","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,3]],"date-time":"2026-07-03T05:17:11Z","timestamp":1783055831000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11576749\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,3,17]]},"references-count":35,"URL":"https:\/\/doi.org\/10.1109\/saner67736.2026.00090","relation":{},"subject":[],"published":{"date-parts":[[2026,3,17]]}}}