IBM and Red Hat launch Lightwell to defend open-source code from AI attacks

- IBM and Red Hat have launched **Lightwell**, a new tool designed to protect open-source code from AI-powered attacks — such as adversarial code injections that exploit the trust-based nature of open-source development.<br>- **Project Lightwell** was originally a research initiative; it has now moved into a full product phase, reflecting growing concern over how AI can be weaponized to compromise software supply chains.<br>- Open-source ecosystems (like npm, PyPI, Maven) are especially vulnerable because they rely on community contributions, which AI can now generate at scale, making malicious submissions harder to spot.<br>- This is part of a broader trend: the line between legitimate AI-assisted coding and automated attacks is blurring, and major tech firms are racing to build guardrails for open-source infrastructure.<br>- **Key context**: Red Hat is IBM's subsidiary focused on open-source enterprise software. The partnership signals that traditional enterprise security players see AI-driven threats to open source as a critical, imminent risk.