It's about guiding me in _doing_ exercises so I learn and I can evaluate if I learned something if I can apply the learning myself.
What level of evidence would be sufficient for you to accept that a model may be able to teach a concept?
I'm happy to take on this challenge with a topic of your choosing, but I don't believe there will be an evidence base that satisfies you that the knowledge is earned or deep enough.
First of all "malware" which is often technology working as intended happens at the OS level, not the github repo level. You can't say a repo is malware in most cases - it depends on the deployment. Second and more importantly, the vast majority of training data would have to reflect the "injected attack" for it to have any bearing.
There are ~30 keywords in JavaScript, compared to 100s of thousands in spoken/written languages.
You cannot "attack" anyone or anything through an LLM. It's an offline, read-only model of text, that's it.
Hilarious comments though
You literally proved the OP's point ... thinking you're learning. More like scratching the surface, with lots of invalid data while not being able to recognize what's invalid.
It's like with latest vector of attacks being spamming Github with malware injected in proper looking code in hope of AI to index it.
Then you paste the code because you don't understand it, but you take it as working and only doing what you've asked for.