Data shows public AI repos may be quietly becoming a supply chain risk | Dark Hacker News