@inproceedings{zhu-etal-2026-beyond-payload, title = "Beyond the Payload: How User Invocation Shapes Coding Agent Vulnerability to Repository Poisoning", author = "Zhu, Fukang and Zhao, Binbin and Lin, Ruixiao and He, Ping and Du, Tianyu and Ji, Shouling", editor = "Lee, Hung-Yi and Dev, Sunipa and Li, Jessy and Elliott, Desmond", booktitle = "Proceedings of the 2026 Conference on Empirical Methods in Natural Language Processing", month = oct, year = "2026", address = "Budapest, Hungary", publisher = "Association for Computational Linguistics", url = "https://aclanthology.org/2026.emnlp-main.932/", pages = "21465--21494", ISBN = "979-8-89176-459-0" }