<p>Devin Review caught the axios supply chain attack for multiple Cognition customers before the attack was publicly known.

These attacks will be 10x more frequent in the age of AI; it is critical that repo maintainers start using AI for defense as well.

(showing one example below where Devin Review caught the attack within an hour of its release - text minorly edited for anonymization)</p>

Scott Wu

Devin Review, an AI-powered code review tool by Cognition, detected the axios supply chain attack for multiple customers before it became publicly known. The post highlights that supply chain attacks will become significantly more frequent in the AI era and argues that repository maintainers should adopt AI-based defenses to stay ahead of such threats. An anonymized example is shared showing Devin Review catching the attack within an hour of its release.

Devin Review caught the axios supply chain attack for multiple Cognition customers before the attack was publicly known.

These attacks will be 10x more frequent in the age of AI; it is critical that repo maintainers start using AI for defense as well.

(showing one example below where Devin Review caught the attack within an hour of its release - text minorly edited for anonymization)