Rogue LLM Endpoint Hijacks Coding Agent Sessions via Free API
A researcher's internet-exposed LLM honeypot was discovered by scanners, relabeled as a DeepSeek-compatible endpoint, and incorporated into 'free' AI backend infrastructure — ultimately receiving a full 224 KB coding-agent session including filesystem listings, tool manifests, and private file contents. The incident demonstrates that a malicious rogue model endpoint occupies a privileged position in an agent's control plane, capable of issuing tool-call responses that the agent may execute locally without further verification. This represents a novel supply-chain-style threat where the adversary is not a compromised trusted service but a counterfeit reasoning backend actively solicited by users chasing free API access.
