REAL ATTACK. UNPROVEN AI ATTACKER.
Someone planted 500+ malicious software packages. Did AI do it?
The dangerous code was real. The claim that autonomous OpenAI agents created it is not proven.
WHAT TO DOVerify the publisher and package history before installing an update.