Already largely possible. If you know some dependency has a vulnerability you could look for projects with that dependancy and try to attack it. Really the onl

Already largely possible. If you know some dependency has a vulnerability you could look for projects with that dependancy and try to attack it. Really the only difference here is in scale and complexity. Potentially LLMs could identify more novel security holes and generate more complex and less suspicious exploits. But take something obvious like SQL injection. There are plenty of bots out there which will crawl the web looking for websites they can exploit with SQL injection. Same thing happens to security cameras with default passwords. But I agree this is likely to be a huge problem going forward. I already see LLMs trying to scam people online and I'm sure there are many people using LLMs to try to find and exploit vulnerable projects as we speak.