Typosquatting bets on your typo. Slopsquatting bets on your AI assistant. When a model invents a...
19.7% of LLM-recommended packages don't exist; 43% of hallucinations recur consistently, letting attackers pre-register names before installs. Postinstall hooks bypass human review—supply chain attack without typos or social engineering.
Typosquatting bets on your typo. Slopsquatting bets on your AI assistant. When a model invents a package that doesn't exist, an attacker registers the name and waits for install to run. Here's the kill chain, why your usual defenses miss it, and what actually stops it across npm, Composer, and pip.
Imagine a coding assistant just told you to run this:
pip install requests-oauth2-helper
Enter fullscreen mode
Exit fullscreen mode
Slopsquatting represents an emerging supply chain threat made possible by AI hallucinations. As developers increasingly rely on…
There's a category of supply-chain attack that only exists because of AI coding agents, and it...
When AI coding agents hallucinate package names, attackers register those exact names with malicious payloads. Here is the…
Slopsquatting, phantom squatting, and HalluSquatting all exploit the same late-binding attack pattern, where AI coding agents…
Research reveals that slopsquatting remains a threat to developers using AI to aid coding.
AI typosquatting embeds lookalike domains in trusted scripts; $8.5M Trust Wallet loss shows browser blind spots.
