S. Chang, H. Huang, Y. Zhang, Y. Huang, F. Xiao, and L. Y. Zhang, “Transferable Backdoor Attacks for Code Models via Sharpness-Aware Adversarial Perturbation”, AAAI, vol. 40, no. 1, pp. 57-65, Mar. 2026.