Post

Attackers can register the package names your AI coding agent makes up. In one 2024 study, 21.7% of the packages that open-source models suggested didn't exist. Make your agent ask before it installs: realpython.com/python-suppl...