Supply chain attacks in the AI era: the state of open source in 2026

Public package registries have shipped malware over and over this past year. What's happening, why AI changed the game, and how to lock down the install side.