Updated logo UPDATED Back to feed
breach watch CSO Online Security July 24, 2026

Top AIs invent same fake PyPl and npm package names

Top AIs invent same fake PyPl and npm package names
AI Summary

Enterprise software developers continue to be in danger of falling victim to slopsquatting, where AI coding tools hallucinate the existence of nonexistent libraries and hackers create malicious packages in response. The top AI coding tools are remarkably consistent in their hallucinations: Researcher Aleksandr Churilov found the same 127 fake package names generated by five different LLMs. Slopsquatting is a relatively new form of malware attack that involves the creation of malicious packages i

0 views
Read full article
Read it on Updated — Tech News. Ahead of the Curve.
Discussion
Sign in to join the discussion.
Loading comments…