Before everyone decides this is all #PHP's fault and they should switch to some other backend... ALL SOFTWARE IS VULNERABLE and #GenAI is making this far worse.
Look for projects that are sticking with human code rather than deskilling for some meaningless LoC benchmark, and digging themselves into a hole that every user of their project is being pulled into.