Why AI agent supply chain attacks are about to get ugly (and how to catch them early)

Last Tuesday, a “helpful” coding agent opened a PR that looked perfect. Tests passed. Lint was...