// #attacker-economics

AI Didn't Make Attackers Smarter — It Removed the Barrier That Was Keeping Them Small

DPRK's AI-generated npm malware campaign is not remarkable because AI made it more sophisticated. It's remarkable because AI let a small team produce something that would previously have required many more people to build and maintain. The scale constraint on supply chain attacks has just changed fundamentally.