I tested Claude Code and Codex for supply chain attacks. Both failed
vett.sh