#dependencies

The AI Coding Assistant Is Now Part of Your Supply Chain

Attackers have noticed that the fastest way into a thousand codebases is through the tools that write them. Poisoned suggestions, compromised extensions and typosquatted models are the new dependency confusion.