Supply Chain Security in the Age of AI: From Surgical Attacks to Automated Cascades

Supply chain attacks have evolved from patient, targeted exploits to fast, automated campaigns leveraging AI-driven dependency management and self-propagating malware. Recent incidents like the Axios and TeamPCP attacks demonstrate how compromised packages can cascade across entire ecosystems in days, while AI coding tools simultaneously increase both developer productivity and attack surface vulnerability.