The attacks are part of a wider campaign known as Mini Shai-Hulud, which has already compromised several open source projects and, in turn, developers and companies that use them.

The Debian project has begun exploring AI-assisted bug triage workflows, joining a broader movement across the open-source ...

AI has made it easy to generate software code, but some open source projects have stopped taking code submissions from the public, citing a deluge of low quality code or code that doesn’t match ...