How are people dealing with security in AI? Especially NPM stuff

Wondering how to effectively screen for malicious stuff in AI beyond just reading the .md files and stuff because there can be a lot of them. And for some of the opensource tools being installed via Node.js npm commands, how do you screen those before they get installed? Saw a thing going around about the Shai Halud worm and it looked new enough to be concerning but old enough to not be sure if it was fixed already. But definitely feels like the era of early internet where you had to be careful of trojan horses and image files with .exe endings.

13 comments