Your AI coding agent is installing vulnerable packages. I built the fix.

Mar 19 · 7 min read · Originally published at tiluckdave.in I asked Claude Code to set up an Express API with auth. It installed 23 packages in under a minute. Scaffolded routes, middleware, database layer — clean code, well-structured, ready to ship. Three of those packa...