Nemeski@lemm.ee to Cybersecurity@sh.itjust.worksEnglish · 3 days agoAI-hallucinated code dependencies become new supply chain riskwww.bleepingcomputer.comexternal-linkmessage-square3fedilinkarrow-up164arrow-down10
arrow-up164arrow-down1external-linkAI-hallucinated code dependencies become new supply chain riskwww.bleepingcomputer.comNemeski@lemm.ee to Cybersecurity@sh.itjust.worksEnglish · 3 days agomessage-square3fedilink
minus-squarecan@sh.itjust.workslinkfedilinkEnglisharrow-up8·3 days ago The only way to mitigate this risk is to verify package names manually and never assume a package mentioned in an AI-generated code snippet is real or safe. We’re doomed
We’re doomed