I don’t want to jump to conclusions, or catastrophize but…
Isn’t this situation a big deal?
Isn’t this a whole new form of potential supply chain attack?
Sure blackmail is nothing new, but the potential for blackmail at scale with something like these agents sounds powerful.
I wouldn’t be surprised if there were plenty of bad actors running agents trying to find maintainers of popular projects that could be coerced into merging malicious code.
Isn’t this situation a big deal?
Isn’t this a whole new form of potential supply chain attack?
Sure blackmail is nothing new, but the potential for blackmail at scale with something like these agents sounds powerful.
I wouldn’t be surprised if there were plenty of bad actors running agents trying to find maintainers of popular projects that could be coerced into merging malicious code.