Comment by fny

If you use third-party packages in your code the risk is far, far greater.

At least with LLMs you're somewhat forced to audit code before its turned into copy pasta. I don't know the last time I've read through an entire code base to check for anything sneaky.