The Trojan Horse in the Terminal: How AI Coding Agents Expand the Software Supply Chain Attack Surface Beyond the Sandbox
Executive Overview The rapid integration of generative artificial intelligence into everyday software engineering has fundamentally altered how code is written, curated, and deployed. Developers routinely enlist AI coding agents to automate tedious workflows—searching GitHub for libraries, configuring project architectures, diagnosing installation snags, and initializing new developer tools. These autonomous or semi-autonomous systems can query codebases,…
