Your AI Code Scanner Just Got Social-Engineered — By the Malware It Was Supposed to Catch
securityRenA typosquatted npm package sat on the registry for two years with 17,000+ downloads, carrying a hidden prompt that begs AI scanners to declare it legit. Here's what it means for how you review dependencies.
5m