Adam Shostack :donor: :rebelverified:This is next level APT TTP right here. https://twitter.com/llm_sec/status/1667573374426701824
“* People ask LLMs to write code
- LLMs recommend imports that don't actually exist
- Attackers work out what these imports' names are, and create & upload them with malicious payloads
- People using LLM-written code then auto-add malware themselves”
All GNU social JP content and data are available under the