AI-generated code leaves businesses open to supply chain risk