AI-Powered Scanning Triggers Wave of OSS Vulnerability Discoveries

The rapid maturation of LLM-powered code scanning tools is fundamentally transforming open source security by enabling mass, systematic vulnerability discovery. Maintainers like Metabase have seen vulnerability reports surge from ~10 per month to ~10 per week since January, with most now coming from AI-assisted scanners rather than human researchers. This shift means OSS projects must now contend with a far larger—and increasingly legitimate—attack surface, as vulnerabilities previously requiring expert analysis are now being automatically identified at scale.