Using ChatGPT to inject malicious code into Open Source projects

Just a thought on a potential attack using ChatGPT.

GPT-4's coding skills are really amazing, but they also open a potential avenue for attack on Open Source projects.

SCENARIO: Attacker scans open issues of popular open source libraries for easy to solve problems.

Using ChatGPT Premium with Web-browsing, ChatGPT may be able to come up with a solution, or at least 70 - 80% of the solution almost instantly.

The attacker can then create a Pull Request and add some malicious code to it (think of the solutions to the Underhanded C contest) which have a decent chance of being overlooked by the dev team.

WHY THIS IS DIFFERENT: By leveraging ChatGPT with Web Browsing, attackers can increase the volume (and possibly the quality) of attacks against popular open source projects.