AI coding tools could accelerate supply chain security threats

Security researchers found that Claude Code’s automation can be abused to fetch malicious GitHub repositories.

The scenario could lead to code execution on a developer’s machine and exposure of credentials.

The issue highlights how AI coding tools can expand the attack surface when default trust and automation are too permissive.

If build and deployment credentials are stolen, the risk can spread across the broader software supply chain.