AWS Threat Intelligence documented a nation-state group trojanizing axios — a JavaScript library with 100 million weekly downloads — with roughly 1 in 10 cloud environments hit within two hours, according to Wiz Research. The pattern points to something bigger than faster attacks: AI now living inside the attack itself, from malware built to evade automated review to package names AI coding assistants hallucinate. See why your incident report template probably can't even name what happened.