Researchers reveal HalluSquatting, a new attack exploiting AI hallucinations to trick coding agents into downloading malware, with success rates up to 92%.

HalluSquatting" weaponizes LLMs' inability to say "I don't know."

Researchers show HalluSquatting can make AI coding agents fetch fake repositories or skills and run attacker-supplied code.