← All writing

#security

• Supply Chain Attacks in the Vibe Coding Era — and How to Defend Apr 13, 2026

  Slopsquatting, MCP Tool Poisoning, automated `npm install` — three new attack surfaces opened up by AI coding agents, and the layered defences that close them.

  #security #supply-chain