Grammar-Constrained Decoding Can Jailbreak LLMs into Generating Malicious Code

Benchmark Model Rank Results
code-generation-on-mbppCodeShield (Qwen2.5-Coder-7B)#68Accuracy: 66.4
code-generation-on-humanevalCodeShield (Qwen2.5-Coder-7B)#90Pass@1: 67.48