AI is transforming software supply chain risks: attacks are now primarily targeting developer workflows and open-source repositories, while threats surrounding model weights, vector stores, and MCP servers remain largely experimental. Attackers are even exploiting package names hallucinated by generative AI by registering them as malicious packages, which AI agents may then install automatically. According to […]
