How fake security reports are swamping open-source projects, thanks to AI https://lxer.com/module/newswire/ext_link.php?rid=350856