AI Labs Fund Open‑Source Supply‑Chain Security

Anthropic has committed $1.5M to the Python Software Foundation to fund proactive, automated review tools for PyPI and to build a malware dataset intended to detect and block supply‑chain attacks. This is an explicit case of an AI vendor underwriting core open‑source infrastructure and security functions that have been underfunded. — Private AI firms funding and effectively steering security work on critical public software raises governance questions about dependence, standards‑setting, vendor capture, and whether core infrastructure should be privately financed or publicly governed.