2 guides
Supply-chain
Plain-English guides on supply-chain for non-technical founders building with AI tools.
founder · 8 min read
NewThe Skill You Installed Last Month Might Be Malware Now
Attackers are cloning AI agent skills, waiting for the install count to climb, then adding the payload. 17,800 add-ons. 6.7 million installs. What to check.
securityai-agents
Sep 2026 founder · 8 min read
NewYour Agent Trusts the Vendor's Docs. Nobody Owns Half of What They Point At.
Researchers found 227 install commands in company docs pointing at packages nobody owned. Agents ran them inside Fortune 500 networks in minutes.
securityai-agents
Sep 2026