There's a category of supply-chain attack that only exists because of AI coding agents, and it...
There's a category of supply-chain attack that only exists because of AI coding agents, and it has
one of the better names in security: slopsquatting.
The mechanic takes one paragraph to explain. Large language models hallucinate package names. Not
randomly — consistently. Ask enough models to scaffold a FastAPI service and a measurable fraction
will import helper packages that don't exist, and the same phantom names recur across models and
Forget typosquatting; slopsquatting is the software supply chain threat created by AI coding tools
New HalluSquatting Attack Could Trick AI Coding Assistants Into Installing Botnet Malware
Hackers can use 9 of the most popular AI tools to assemble massive botnets
Researchers warn AI agents could become botnets through hallucinations
New hack exploits AI hallucinations to trick agents into running malicious code — 'HalluSquatting' attack exploits a fundamental weakness in every available model
'HalluSquatting' Turns AI Hallucinations Into Botnet Delivery Mechanism
AI Agents Could Be Turned Into Botnets Through Hallucinations, Researchers Warn - Decrypt
New Agent Data Injection Attack Can Make AI Agents Misclick or Run Attacker Commands
AI Coding Tools Tricked Into Hacking Developer Machine via Decades-Old Technique
AI coding tool hole illustrates a big problem with human in the loop
Typosquatting bets on your typo. Slopsquatting bets on your AI assistant. When a model invents a...
Slopsquatting represents an emerging supply chain threat made possible by AI hallucinations. As developers increasingly rely on…
When AI coding agents hallucinate package names, attackers register those exact names with malicious payloads. Here is the…
Slopsquatting, phantom squatting, and HalluSquatting all exploit the same late-binding attack pattern, where AI coding agents…
Researchers show HalluSquatting can make AI coding agents fetch fake repositories or skills and run attacker-supplied code.
Nine tools, one shared blind spot Researchers reported in July 2026 that nine of the most...
