AI now writes as much as 90% of code at top engineering organizations, and the developers downstream of that code pull in open source they’ve never reviewed. Package hijackings and maintainer compromises that were once a handful of incidents a year now happen weekly. Modern engineering organizations depend on open source to ship faster, and they need security partners who can keep pace with that shift.