npm Package Uses Prompt Injection and Token Flooding to Disrupt AI Malware Scanners

A newly discovered npm package uses prompt injection, safety-triggering comments, context flooding, and staged obfuscation to deliberately disrupt and evade AI-based malware scanners, signaling a new wave of adversarial techniques targeting automated code review systems.