DeepSeek-Reasonix: How a poisoned config can hijack an AI coding agent

Published on: October 2, 2026 7 min read GitLab's Threat Research Group found a flaw, ConfigPoisoning, that runs attacker code when a developer views a file's diff in DeepSeek-Reasonix.