BLA plants fake keys and decoy APIs to derail AI reverse-engineering agents
teortaxesTex · x · 2026-10-29
A new open-source tool called BLA sabotages AI reverse-engineering agents (like REA) by planting fake keys, decoy interfaces, and misleading logic in release packages, burning the agent's tokens while it chases worthless leads. The author tested against real REA: hardened JS hits budget-limit errors, Electron ASAR reports capacity errors, and WASM interfaces only partially readable — yet all 14 benchmark samples still ran identically to the original. Usage: npx bla-agents setup (integrates with Claude Code, Codex, Cursor) then npx bla-agents harden . to scan and harden release files.
Related event: BLA Tool Traps Reverse-Engineering AI Agents with Decoys(2 posts)→
More from coding & agent
- Multi-agent coding setup shown: Replit Agent orchestrating Codex and Claude Code in parallel — amasad · 2026-10-30
- Promptable Products: physical devices you reprogram by talking to them, launching Nov 2026 — genmon · 2026-10-30
- Building the system that displaces GitHub: agent-native CI/CD after three iterations since 2024 — kieranklaassen · 2026-10-30
- Indie dev ships an MCP server exposing 40 US government per diem and allowance tools — allowancesapiteam · 2026-10-30
- Building your own MCPs: developers share why they backed off — AaGho_ · 2026-10-30
- Serro pitches the 'Agentic TPM': one agent to keep your coding agents in sync — Scobleizer · 2026-10-30