In analyzing dozens of AI PoCs that sailed on through to full production use — or didn’t — six common pitfalls emerge.

Researchers say the malware was in the repository for two weeks, advise precautions to defend against malicious packages.