--- title: The frontend dependency your AI assistant picked without... description: AI coding assistants are increasingly making autonomous npm install decisions, and this creates a new supply chain attack surface. Research across 16 LLMs... canonical: https://daily.dev/posts/the-frontend-dependency-your-ai-assistant-picked-without-telling-you-ufl5eupjk twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: The frontend dependency your AI assistant picked without telling you | daily.dev og:description: AI coding assistants are increasingly making autonomous npm install decisions, and this creates a new supply chain attack surface. Research across 16 LLMs... og:url: https://daily.dev/posts/the-frontend-dependency-your-ai-assistant-picked-without-telling-you-ufl5eupjk og:image: https://api.daily.dev/og/posts/ufl5EUpjk.png og:image:alt: The frontend dependency your AI assistant picked without telling you og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # The frontend dependency your AI assistant picked without telling you **[Open Source Front End](https://daily.dev/sources/opensourcefrontend)** · [@julia7](https://daily.dev/julia7) · 2 min read · 0 upvotes · 0 comments ## Summary AI coding assistants are increasingly making autonomous npm install decisions, and this creates a new supply chain attack surface. Research across 16 LLMs found nearly 1 in 5 package recommendations were hallucinated names that don't exist, and attackers can predict, register, and poison these names before an assistant suggests them. Frontend projects are especially exposed given their heavy reliance on npm, already the most targeted package ecosystem, having suffered three major supply chain incidents in eight months including a self-propagating worm and a nation-state compromise. ## Content 𝐅𝐫𝐨𝐧𝐭𝐞𝐧𝐝 𝐝𝐞𝐯𝐞𝐥𝐨𝐩𝐦𝐞𝐧𝐭 𝐫𝐮𝐧𝐬 𝐨𝐧 𝐧𝐩𝐦. 𝐀𝐧𝐝 𝐧𝐩𝐦 𝐢𝐬 𝐭𝐡𝐞 𝐦𝐨𝐬𝐭 𝐭𝐚𝐫𝐠𝐞𝐭𝐞𝐝 𝐩𝐚𝐜𝐤𝐚𝐠𝐞 𝐞𝐜𝐨𝐬𝐲𝐬𝐭𝐞𝐦 𝐢𝐧 𝐬𝐨𝐟𝐭𝐰𝐚𝐫𝐞 𝐝𝐞𝐯𝐞𝐥𝐨𝐩𝐦𝐞𝐧𝐭 𝐛𝐲 𝐚 𝐜𝐨𝐧𝐬𝐢𝐝𝐞𝐫𝐚𝐛𝐥𝐞 𝐦𝐚𝐫𝐠𝐢𝐧. Three major supply chain incidents in eight months, including a self-propagating worm and a nation-state compromise hidden inside one of the most downloaded packages in the ecosystem. Now add the part that's newer and less discussed: AI coding assistants are making npm install decisions autonomously. You ask for a component, the assistant decides it needs a utility package, picks one, installs it. You're looking at the output, not the dependency tree. The problem with that: research across 16 LLMs found nearly 1 in 5 package recommendations were names that didn't exist. Those hallucinated names come up consistently enough across different prompts that attackers can predict them, register them on npm, and load them with malicious code before your assistant asks. The package gets installed. Nothing in your standard frontend toolchain flags it. Frontend projects are particularly exposed here simply because of how heavily they depend on npm and how often AI assistants are now making dependency choices in that ecosystem without a second set of eyes. Worth a read if you use any AI tooling in your frontend workflow: [𝐧𝐩𝐦 𝐏𝐚𝐜𝐤𝐚𝐠𝐞 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲: 𝐖𝐡𝐚𝐭 𝐂𝐡𝐚𝐧𝐠𝐞𝐬 𝐖𝐡𝐞𝐧 𝐘𝐨𝐮𝐫 𝐀𝐈 𝐀𝐠𝐞𝐧𝐭 𝐑𝐮𝐧𝐬 𝐭𝐡𝐞 𝐈𝐧𝐬𝐭𝐚𝐥𝐥.](https://xygeni.io/blog/npm-package-security-for-the-age-of-ai-agents/?utm_source=dailydev&utm_medium=post&utm_campaign=opensourcefrontend-squad) 𝐁𝐮𝐢𝐥𝐝 𝐟𝐚𝐬𝐭. 𝐒𝐭𝐚𝐲 𝐬𝐞𝐜𝐮𝐫𝐞. --- Tags: [#security](https://daily.dev/tags/security), [#ai-coding](https://daily.dev/tags/ai-coding), [#npm](https://daily.dev/tags/npm) [View this post on daily.dev](https://daily.dev/posts/the-frontend-dependency-your-ai-assistant-picked-without-telling-you-ufl5eupjk) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"DiscussionForumPosting","mainEntityOfPage":"https://daily.dev/posts/the-frontend-dependency-your-ai-assistant-picked-without-telling-you-ufl5eupjk","headline":"The frontend dependency your AI assistant picked without telling you","text":"AI coding assistants are increasingly making autonomous npm install decisions, and this creates a new supply chain attack surface. Research across 16 LLMs found nearly 1 in 5 package recommendations were hallucinated names that don't exist, and attackers can predict, register, and poison these names before an assistant suggests them. Frontend projects are especially exposed given their heavy reliance on npm, already the most targeted package ecosystem, having suffered three major supply chain incidents in eight months including a self-propagating worm and a nation-state compromise.","url":"https://daily.dev/posts/the-frontend-dependency-your-ai-assistant-picked-without-telling-you-ufl5eupjk","datePublished":"2026-09-03T08:09:11.778Z","dateModified":"2026-09-03T08:09:31.153Z","author":{"@type":"Person","name":"Julia","url":"https://daily.dev/julia7","image":"https://media.daily.dev/image/upload/s--Vye82kCe--/f_auto/v1752235114/avatars/avatar_JI6NHO2CHs2BU4FFm4NUw?_a=BAMClqZW0","description":"DevSecOps Lover and Software Supply Chain Security Advocate | Solutions Manager at Xygeni","interactionStatistic":{"@type":"InteractionCounter","interactionType":{"@type":"EndorseAction"},"userInteractionCount":240}},"image":"https://media.daily.dev/image/upload/s--ZHssTEbx--/f_auto/v1788422951/posts/ufl5EUpjk?_a=BAMAMicg0","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"isPartOf":{"@type":"WebPage","url":"https://daily.dev/squads/opensourcefrontend","name":"Open Source Front End"}} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Open Source Front End","item":"https://daily.dev/squads/opensourcefrontend"},{"@type":"ListItem","position":3,"name":"The frontend dependency your AI assistant picked without telling you"}]} ```