Localizing Malicious Outputs from CodeLLM