{"data":{"id":"4c81aae2-e51c-4fa8-b988-75c2b01cc0e0","title":"Endor Labs’ ‘State of Dependency Management 2023’ Report Offers Insight on Explosive Popularity of AI and LLMs—and How They Impact Application Security | Endor Labs","summary":"Endor Labs released its \"State of Dependency Management 2023\" report, compiled by its Station9 research team, on dependency risks and how AI is affecting application security. The report finds that existing LLM technologies accurately classify malware risk in barely 5% of cases, and that 900 npm and PyPI packages use ChatGPT's API, 75% of them brand new.","solution":"N/A -- no mitigation discussed in source.","labels":["industry","research"],"sourceUrl":"https://www.endorlabs.com/learn/endor-labs-state-of-dependency-management-2023","publishedAt":"2026-10-12T15:59:35.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":[],"issueType":"news","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["OpenAI"],"affectedVendorsRaw":["ChatGPT","ChatGPT API","LLM-based AI platforms"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-10-12T15:59:35.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":null,"aiComponentTargeted":null,"llmSpecific":true,"classifierConfidence":0.8,"researchCategory":null,"atlasIds":null}}