AI coding assistants feel like magic when they fix errors, write boilerplate, and wire up APIs while you just keep typing. But the same “helpful” behavior can quietly introduce malware into your project by auto‑installing packages, auto‑accepting risky suggestions, and running code paths you never really reviewed.

As a senior frontend developer,...