AI Has Taken Over Open Source

What Happened

AI tools are changing how software is built by automatically writing code and selecting open-source building blocks. This has led to a massive spike in new software packages and a flood of automated, low-quality contributions that frustrate project maintainers. Because AI is picking these building blocks without human review, it creates a security blind spot where malicious code could easily slip into company software. Organizations should adapt by using automated security tools to scan third-party code for risky behavior before using it.

Key Takeaways

• AI coding tools have triggered an unprecedented, exponential spike in new npm packages starting in January 2026.
• AI is automating dependency selection, leading to a significant decline in manual 'dependency shopping' and human review by developers.
• Open-source maintainers are experiencing fatigue from a flood of low-quality, AI-generated automated pull requests.
• The software supply chain is becoming an automated black box, increasing the risk of malware campaigns slipping into enterprise codebases.
• Automated behavioral analysis of third-party code is becoming a baseline requirement as manual review is no longer scalable.

Affected Systems

• npm ecosystem
• Open Source Software Supply Chain
• Developer IDEs with AI assistants

Attack Chain

Threat actors can leverage the AI-driven automation of dependency selection to introduce malicious packages into the software supply chain. As developers increasingly rely on AI tools to build features and automatically pull in required packages, the traditional manual review process is bypassed. This allows malware disguised as legitimate or typo-squatted dependencies to be seamlessly integrated into enterprise codebases without human detection.

Detection Availability

• YARA Rules: No
• Sigma Rules: No
• Snort/Suricata Rules: No
• KQL Queries: No
• Splunk SPL Queries: No
• EQL Queries: No
• Other Detection Logic: No

No specific detection rules are provided in the article, as it discusses systemic supply chain risks rather than a specific malware family.

Detection Engineering Assessment

EDR Visibility: Low — EDR focuses on endpoint execution and runtime behavior, whereas this risk involves the inclusion of malicious dependencies during the development and build phases before deployment. Network Visibility: Low — Network logs will only show standard HTTPS traffic to package registries (e.g., npm), which is indistinguishable from legitimate development activity. Detection Difficulty: Hard — Distinguishing between AI-generated benign packages and AI-generated/selected malicious packages requires deep behavioral analysis of the code itself, not just signature matching or network monitoring.

Required Log Sources

• Package manager lockfiles (e.g., package-lock.json)
• CI/CD pipeline dependency resolution logs
• Software Composition Analysis (SCA) alerts

Hunting Hypotheses

Hypothesis	Telemetry	ATT&CK Stage	FP Risk
Developers are unknowingly pulling in newly created, unvetted npm packages via AI coding assistants.	CI/CD dependency resolution logs and package manager lockfiles.	Initial Access	High

Control Gaps

• Manual code review processes
• Static signature-based Software Composition Analysis (SCA)

Key Behavioral Indicators

• Sudden inclusion of newly published packages with zero or low reputation in project lockfiles
• Packages with READMEs heavily featuring em dashes (potential AI generation indicator) combined with obfuscated or anomalous code patterns

False Positive Assessment

• High

Recommendations

Immediate Mitigation

• Verify against your organization's incident response runbook and team escalation paths before acting.
• Consider auditing recent additions to project lockfiles for newly created or unknown dependencies that may have been introduced by AI assistants.

Infrastructure Hardening

• Evaluate implementing automated behavioral scanning for all third-party dependencies in CI/CD pipelines.
• Consider restricting package downloads to approved internal registries or proxies that enforce security and reputation checks.

User Protection

• If supported by your tooling, configure developer environments to warn or block the installation of unvetted or newly published packages.
• Evaluate the security settings of AI coding assistants used by developers to limit autonomous dependency inclusion.

Security Awareness

• Consider educating developers on the risks of AI-driven dependency selection and the importance of reviewing AI-generated code.
• Evaluate updating secure coding guidelines to explicitly address the use of AI coding tools and dependency management.

MITRE ATT&CK Mapping

• T1195.001 - Supply Chain Compromise: Compromise Software Dependencies and Development Tools