AI coding agents are pulling packages nobody registered
September 8, 2026. From issue 5 of The Compliance Brief, one story for founders shipping AI-built and vibe coded apps.
Issue 5 of The Compliance Brief was published on September 8, 2026. One of its 5 stories bears on AI security, LLM attacks and app security flaws, and they are below in short form. The full issue, with every take in full, is on traztech.ca.
Free weekly email
Get the next issue on Tuesday
One email a week: what changed in security and compliance, and what it means for founders shipping AI-built and vibe coded apps.
Free. One email every Tuesday from Jacob Masse, and nothing else: signing up here does not add you to any other sequence. One click unsubscribes.
Source: Schneier on Security
Researchers scanned 6,214 live domains belonging to defence contractors, Fortune 500 and large tech companies and found 8,265 llms.txt and llms-full.txt files. Of those, 120 on different sites pointed to code packages or domain names that were not registered.
Our take, in short
This is dependency confusion with a new delivery path, and the old defences still apply. Pin your dependencies, keep an internal registry that fails closed on unknown names, and make sure an agent cannot install anything that a human would not have been allowed to install.
Read the full take on traztech.ca
Related on VibeCoded
- Are AI-suggested packages safe?
- Can AI fix its own security bugs?
- Is my AI-built app open to SQL injection?
- Black box test or code review?
Also in issue 5
Outside AI security, LLM attacks and app security flaws, but in the same email:
- Thomson Reuters court software breached in March, disclosed in September
- An ID verification vendor appears to be the source of 153 million licence scans
- FTC takes $4.85M from Nuvei over who it let onto its rails
- McKesson tells the SEC it was hit through third-party applications
Older: issue 4 All issues on VibeCoded Newer: issue 7
Free weekly email
Get it every Tuesday
The next issue goes out Tuesday morning. Read it in your inbox instead of finding it here a week later.
Free. One email every Tuesday from Jacob Masse, and nothing else: signing up here does not add you to any other sequence. One click unsubscribes.