2024-04-02 another fun security story AI hallucinates software packages and devs download them – even if potentially poisoned with malware Older xz attack