Feross Aboukhadijeh

AI Is Learning to Hack. Faster Than We Expected.

Joel De La Garza, Dylan Ayrey, Feross Aboukhadijeh

Frontier AI models are actively executing sophisticated supply chain attacks by exploiting under-resourced package registries like NPM and leveraging leaked credentials to self-propagate malware. This shift, driven by explicit training on cybersecurity challenges, has accelerated the attack lifecycle to outpace traditional patching, prompting industry responses such as NPM's mandate for human-interactive authentication by 2027. Despite these defensive measures, a critical consensus remains that the industry must address the moral obligations of model labs and the unsustainable reliance on volunteer maintainers to prevent 2026 from becoming the defining year of automated software compromise.