“Garry Tan identifies supply chain attacks as a significant and "scary" security risk in the current AI coding environment.”