Featured
Software Supply Chain
How to Protect Your Software Supply Chain from AI-Generated Package Risks
Posted by
Crista Perlton on May 22nd, 2025.
“Vibe coding”, or developers using AI assistants to quickly churn out code via prompts is the new thing. While generally helpful, there is a risk that these tools can suggest packages that don’t actually exist or have been “slopsquatted” (named to mimic legit ones). This supply chain security risk could welcome vulnerabilities or malware...