Tag: supply chain security

Researchers just showed that a booby-trapped code repo can trick six popular AI coding assistants into writing files where they shouldn’t – and that the ‘approve this action’ button you rely on can be lying to you. Here’s what the GhostApproval flaw means, why blind trust in AI code is the real risk, and the simple habits that keep you safe.