AI tools are rapidly becoming contributors to open source software—generating code, proposing fixes, and accelerating development across projects. But what happens when AI becomes part of the software supply chain itself? Platform teams must now consider new risks: AI-generated vulnerabilities, dependency confusion, licensing issues, and automated agents interacting with repositories and infrastructure. This session explores how AI is reshaping the open source ecosystem and what platform engineers must do to maintain trust, transparency, and security while still benefiting from AI-powered productivity.