What happens when AI starts writing its own malicious code and foreign adversaries embed themselves in the software supply chain?