49% OF DEPENDENCIES IMPORTED BY AI AGENTS HAVE KNOWN VULNERABILITIES, AND 34% DON'T ACTUALLY EXIST

Summary from the TLDR InfoSec newsletter

The latest research from Endor Labs [11] analyzed 10,663 GitHub repositories implementing MCP servers, along with large-scale testing of AI-generated dependency recommendations across major ecosystems. Download the report to see how AI coding agents are introducing a new layer of software supply chain risk. Get the _2025 State of Dependency