The Rise of Slopsquatting
socket.dev
socket.dev
Remember kids, AI is not your friend, it's a tool. Trust but verify. Always.
What does this mean?
Don't derail the whole thing by arguing that libfoo couldn't possibly be secure because x, y, and z, it's about getting to the vendors value proposition and not getting stuck in important but not-right-now details.