gonna gently push back that there's no reason (according to github's version of the story) to associate this with AI or with spectacular incompetence on the part of the employee; the issue is that industry standard, extremely widely used text editor Visual Studio Code has a big button that says "click here to add useful functionality to do your job" that has a 1% chance of installing ransomware
@0xabad1dea vscode, the editor that automatically runs arbitrary shell commands from .vscode/config.json without confirmation the moment you press the big "trust workspace" button that it conditions users into clicking without thinking. and somehow that is still one of the most popular editors
@lea@0xabad1dea Not that I disagree, but in certain languages just compiling the code without executing the resulting binary can execute arbitrary code. Same for running the LSP. Sadly the workspace trust problem goes beyond that editor.