Slopsquatting: When Your AI Coding Assistant Invents a Package Name and an Attacker Is Waiting
Ask an AI coding assistant for the right library and sometimes it confidently names one that doesn’t exist. Attackers noticed. They’re registering those hallucinated package names and waiting for you to run install. It’s called slopsquatting, it’s disturbingly predictable, and here’s exactly how to keep it out of your projects.