AI risks threaten to permeate supply chains through unvetted code and unaudited suppliers