I can't tell if #projectglasswing is just marketing or genuine fearmongering. From what I've seen, bigger open-source projects don't exactly have a love relationship with AI. And I'm not sure if this isn't just a marketing tactic to change that through fear. Because if something gets introduced upstream, it's more likely that downstream projects pick it up as well.

https://www.anthropic.com/glasswing

Project Glasswing: Securing critical software for the AI era

A new initiative to secure the world’s most critical software and give defenders a durable advantage in the coming AI-driven era of cybersecurity.