Tech article
Slopsquatting: AI Hallucinations as Supply Chain Attacks
Community description: One in five AI code suggestions recommends a package that does not exist. Attackers are registering those names with malware.
Dev.to | Mar 5, 2026 | Bobby Blaine
Automated excerpt
One in five AI-generated code samples recommends a package that does not exist. Existing registry defenses flag new package names that are too close to popular ones. The USENIX study found that 8. 7% of hallucinated Python package names turned out to be valid JavaScript packages.
Selected automatically from source text; not independently written or fact-checked. Read the original for full context.