AI-generated code could be a disaster for the software supply chain