• About
  • AI Developer Tools
  • AI Model Quality Leaderboard
  • AI Model Usage Tracker
  • Blog
  • Contact
  • Disclaimer
  • Home
  • Hot AI Media Models
  • Privacy Policy
  • Trending Open Models

AIToolsForHumans

Real Humans Working With AI Tools

Tag: npm

The Shai-Hulud Worm Is Riding AI Coding Assistants Into Company Code: What It Means for You

Raymond on September 21, 2026

A glowing AI assistant orb beside a laptop, a thread of light branching out and lighting many small repository cubes in a grid

Mandiant says an attacker hijacked a live AI coding-assistant session and used it to spread the self-replicating Shai-Hulud worm across about 100 code repositories. Here’s what actually happened, why it matters even if you just ‘vibe code’ on the side, and a plain-language routine to keep the convenience without the breach.

Slopsquatting: When Your AI Coding Assistant Invents a Package Name and an Attacker Is Waiting

Raymond on September 8, 2026

A glowing AI assistant handing a developer a package-shaped box of light with a hidden hook inside, illustrating a slopsquatting trap

Ask an AI coding assistant for the right library and sometimes it confidently names one that doesn’t exist. Attackers noticed. They’re registering those hallucinated package names and waiting for you to run install. It’s called slopsquatting, it’s disturbingly predictable, and here’s exactly how to keep it out of your projects.

Footer

Archives

  • October 2026
  • September 2026
  • August 2026
  • July 2026
  • May 2026
  • April 2026
  • March 2026
  • February 2026

Categories

  • AI
  • AI Coding
  • AI Tools
  • Content Moderation
  • Developer Tools
  • Open Source
  • Productivity
  • Security
  • Uncategorized
Copyright © 1998-2026 AIToolsForHumans.com. All rights reserved.
  • About
  • Contact
  • Privacy Policy
  • Disclaimer