“there's this now concept of shadow AI where there's AI popping up everywhere and enterprises and corporations don't know where it is... the threat actors are very good at figuring this out, and then they're basically going upstream... compromising these packages and libraries.”