发生了什么
AI coding assistants are pulling open-source packages, libraries, and container images into enterprise codebases faster than security teams can review them, widening the attack surface for software supply chain attacks. Malicious packages, typosquatted libraries, and compromised transitive dependencies all enter through the same automated .
AI coding assistants are pulling open-source packages, libraries, and container images into enterprise codebases faster than security teams can review them, widening the attack surface for software supply chain attacks.
Malicious packages, typosquatted libraries, and compromised transitive dependencies all enter through the same automated .
Chainguard's CISO Quincy Castro warns that the traditional request, review, and approve cycle is unsustainable and that security teams are struggling to patch severe vulnerabilities, let alone all the mediums and highs they regularly risk-accept.
Castro points to a recent attack operation that mass-produced forks of legitimate projects, seeded malware into them, and scattered them widely enough that developers would mistake a fork for the official repository and pull attacker capability into their CI/CD .
Attackers are also increasingly using typosquatting, maintainer account takeover, poisoned distribution points, and dependency riding.
为什么这很重要
The resulting dependency sprawl is making it difficult for security teams to keep up with the pace of development, leaving enterprises vulnerable to software supply chain attacks. Chainguard's CISO Quincy Castro warns that the traditional request, review, and approve cycle is unsustainable and that security teams are struggling to patch severe vulnerabilities, let alone all the mediums and highs they regularly risk-accept.
The resulting dependency sprawl is making it difficult for security teams to keep up with the pace of development, leaving enterprises vulnerable to software supply chain attacks.
Chainguard's March 2026 State of Trusted Open Source report found that 96.2% of common vulnerabilities and exposures (CVEs) sit outside the top 20 container images, and the June edition raised that number to 97%.
Enterprise hardening programs concentrate on the small set of images that account for the remaining sliver.
Risk concentration is inverted from where most enterprise attention goes, with organizations pouring resources into hardening a small set of well-known, widely used images, while the actual exposure lives in the long tail.
Ensuring safe transitive dependencies is one of the issues DIYers run into when they try to build their own systems for securing the software supply chain.
互动机制：它实际上是如何运作的
以交互方式探索这一发展背后的基础技术。
What is an adversarial example in machine learning security?
接下来看什么
The increasing use of AI coding assistants and the resulting dependency sprawl are making it difficult for security teams to keep up with the pace of development. Enterprises need to find ways to ensure safe transitive dependencies and to prevent vulnerabilities from reaching the scanner in the first place.
The increasing use of AI coding assistants and the resulting dependency sprawl are making it difficult for security teams to keep up with the pace of development.
Enterprises need to find ways to ensure safe transitive dependencies and to prevent vulnerabilities from reaching the scanner in the first place.
Verified, secure-by-default components are meant to be those preventive layers, shrinking the vulnerability load before any gate has to catch it.
No prevention model can depend on steering every team toward the best-supported packages.
A finance analyst who vibe-codes an internal tool in an AI-assisted IDE has no SRE team or application security staff checking their output.