> How long do we have until the first serious AI coding agent poisoning attack, where someone finds a way to trick coding assistants into inserting malware while a vibe-coder who doesn't review the code is oblivious?

I mean we had Shai-Hulud about a week ago - we don't need AI for this.