Injected Code — Local File Exfiltration to a Remote Endpoint - ATR-2026-01890 (b0e74fc8-4568-54c0-b9a2-918d52ed8eb4)
Detects indirect-injection payloads (BIPIA code class) that coerce the agent to embed a code snippet which reads a local file and ships its raw bytes to an attacker-controlled endpoint via HTTP POST, FTP STOR, raw socket, or Bluetooth. Invariant: a local read (open()/.read()/.tobytes()/r.content) bound to a remote sink in the same statement.