ArXiv: “Adversarial Attacks on Code Models with Discriminative Graph Patterns” (link).