A new attack technique dubbed HalluSquatting turns AI assistants’ tendency to hallucinate into a scalable infection vector.

HalluSquatting" weaponizes LLMs' inability to say "I don't know."

Researchers show HalluSquatting can make AI coding agents fetch fake repositories or skills and run attacker-supplied code.