3 comments

[ 2.1 ms ] story [ 18.4 ms ] thread
(comment deleted)
It seems like a natural response to using AI for package spoofing is to use AI to look for malware in each release of each package. It's a red queen's race, so we'll never win, but we lose if we don't run.