# "private key" (compromised OR stolen OR leaked) — X 热门讨论 (2026-09-15 09:30 UTC)
## @HowToPrompt__ (How To Prompt) · 09-14 13:32 · ♥21 ↻5 💬12 This paper "Your Agent Is Mine" shows how malicious middlemen in the LLM supply chain can inject prompts, steal data, and reroute outputs without you knowing.
When you run agentic workflows, using tools like Claude Code, Cowork, or OpenClaw to automate your desktop or business tasks, you often route them through an API proxy.
LiteLLM. OpenRouter. Cheap third-party resellers.
You do this to save on API costs, balance loads, or switch models easily.
But there is a flaw in the architecture.
These routers are full-plaintext "men-in-the-middle." They see everything.
Your system prompts. Your codebases. Your API keys.
And worse.. they can rewrite the AI's response before it ever reaches your machine.
Researchers at UC Santa Barbara tested 428 LLM API routers.
What they found is terrifying.
The routers aren't just watching. They are actively attacking.
9 different routers were caught secretly injecting malicious code into the AI's tool-calling responses.
You ask your agent to write a safe installation script. The AI writes it perfectly. The router intercepts it in transit, swaps a legitimate dependency for malware, and hands it back to you.
17 routers were caught silently stealing AWS credentials. One actively drained Ethereum from a private key.
But here is the real trap.
Autonomous execution.
If you are vibe coding and letting your agents run in "YOLO mode" to automate tasks without human approval, you are completely exposed.
The researchers tracked hundreds of sessions doing exactly this.
When the compromised router injects the malware, the agent doesn't pause to ask you. It just executes the code.
They titled the paper exactly what happens next: "Your Agent Is Mine." https://x.com/HowToPrompt__/status/2099491546127360455