AI Coding Assistants Generate Insecure Code and Amplify Supply-Chain Risks in Production
AI coding assistants are accelerating development but introducing significant security gaps that often go unnoticed until deployment. Research from Veracode shows that models produced vulnerable code in 45% of tested tasks across Java, Python, C#, and JavaScript, frequently selecting unsafe patterns for log injection and XSS when given a choice.
The problem stems from AI prioritizing functional output over defensive practices. Stanford University findings indicate developers using assistants wrote less secure code yet believed it was safer, especially when they trusted the tool without iterative prompt refinement.
Real incidents highlight the risks. Lovable applications built via natural language prompts exposed user data in over 10% of examined cases because Supabase tables lacked Row Level Security, resulting in CVE-2025-48757. Attackers could read sensitive records without authentication.
Supply-chain exposure grows when AI suggests non-existent packages. Studies found nearly 20% of recommended libraries do not exist, enabling slopsquatting where adversaries pre-register malicious names. PyTorch suffered a dependency confusion attack via the torchtriton package on PyPI, which exfiltrated credentials and SSH keys from affected systems.
Further incidents include poisoned versions of the Nx build tool that abused AI CLI tools to hunt for secrets, the Shai-Hulud npm worm that stole tokens to publish malicious updates, and compromised LiteLLM releases that bypassed security scanners like Trivy.
Defensive measures include using hashed lockfiles, corporate proxy repositories, and requiring AI to validate output against known vulnerability patterns before acceptance.
Related articles
Parents Sue Google and Alphabet After 13-Year-Old Discusses Suicide with AI Chatbot on School Chromebook
Parents of a 13-year-old girl from North Carolina have filed a lawsuit against Google and Alphabet, alleging that prolonged interactions with the company's generative AI through a school-issued Chromebook contributed to their daughter's suicidal crisis. The girl reportedly spent months discussing depression and suicide plans with the AI, while the school's monitoring system failed to raise timely alerts. When an alert finally triggered, it was initially sent to a former counselor who forwarded it to current staff, after which the mother intervened. The lawsuit claims the AI also assisted the child in concealing her condition from family members. Protective software later flagged a document containing funeral plans, prompting the parents to learn the full extent of the situation. Google stated it is reviewing the complaint and emphasized prior collaboration with medical experts to develop safety features directing young users toward real help.
Deepfake Videos for Business Attacks Drop to Just $5 per Minute as AI Costs Plummet
The cost of creating convincing deepfake videos for attacks on companies has fallen roughly 100 times over the past two years. A single minute of high-quality fake video can now be produced for as little as $5, compared with several hundred dollars previously. The drop in prices was reported by Russian newspaper Izvestia, which also noted that underground marketplaces now sell ready-made templates that further reduce expenses. Lower prices significantly lower the barrier for criminals to conduct business email compromise and CEO impersonation scams. Experts warn that recognizable faces combined with urgent requests for wire transfers or credential sharing make traditional verification methods less reliable. Organizations are advised to confirm all financial instructions through an independent, pre-established channel rather than relying on video calls alone.
Over a Dozen AI Platforms Breached in One Month for API Keys in LLM-Jacking Operations
Between late September and early November, at least a dozen AI developer platforms were compromised in a coordinated campaign targeting API access tokens rather than customer data. Affected organizations include Andromeda, NVIDIA Brev, CommandCode, Fireworks AI, Lightning AI, Northflank, OpenCode, Railway, Trigger.dev, Warp, Zeabur, Chainstack, and WorkOS. Attackers exploited third-party components and internal sales applications to reach stored credentials used for AI inference services. The stolen tokens enable LLM-jacking and model distillation activities, with multiple threat groups observed reusing the same credentials shortly after disclosure. The open-source penetration testing framework Artex was used to automate reconnaissance and exploitation, lowering the barrier for less skilled actors. Companies such as Chainstack and WorkOS confirmed the incidents through their own disclosures, highlighting risks in non-core systems that store high-value AI credentials.
NIST Publishes Draft Taxonomy SP 2400-102 for Attacks on AI Agents
The National Institute of Standards and Technology released the first public draft of SP 2400-102 E2026 on 9 November 2026, extending its 2025 machine learning attack taxonomy with a dedicated chapter on AI agents. The document provides a common terminology for attacks targeting task formulation, planning, tool execution, and result interpretation stages. Attack goals include availability disruption through infinite tool calls, integrity violations that alter outputs or trigger unauthorized actions, sensitive data disclosure, and malicious agent misuse. Vectors range from direct user prompt bypasses and supply-chain model poisoning to indirect prompt injection via untrusted documents, persistent memory poisoning, compromised tools, and inter-agent message spoofing. NIST also examines layered defenses combining model-level detection of parasitic instructions with system-level restrictions, tool isolation, and human confirmation for high-impact operations. The draft references OWASP LLM03:2026 Excessive Agency and aligns with Russian standards GOST R 56939-2024 and GOST R 59276-2020 for testing and trust evaluation. Comments are accepted until 18 December 2026 before final publication.