First reported · updated · 3 reports snyk.io
Analysis · latest
First reported · updated · 2 reports youtube.com
What is 'SlopSquatting'? - YouTube
Tanya Janca (SheHacksPurple) explains 'slopsquatting,' a software supply-chain attack in which an AI coding assistant hallucinates a non-existent package name, and a malicious actor then registers that name and fills it with harmful code so developers unwittingly download it. The one-minute video defines the concept and warns developers against blindly trusting AI-generated package recommendations. Details →First reported · updated · 8 reports venturebeat.com
Forget typosquatting; slopsquatting is the software supply chain threat created by AI coding tools | VentureBeat
VentureBeat and related sources describe "slopsquatting," a software supply-chain attack in which AI coding agents hallucinate non-existent package names and attackers preemptively register those names with malware. Research cited (Socket.dev, USENIX, and arXiv work including Ben Nassi et al.'s "adversarial hallucination squatting") finds hallucination rates as high as 19.7% of recommended packages, with hallucinated names repeated reliably (43-58%), enabling attackers to predict and register them; agentic "HalluSquatting" has been demonstrated to achieve remote tool and code execution and even botnet formation. Details →First reported · updated · 13 reports dev.to
Slopsquatting: The Supply Chain Attack That Weaponizes AI Hallucinations
An explainer on slopsquatting describes how code-generating LLMs like GitHub Copilot and ChatGPT hallucinate plausible-sounding but non-existent package names, which attackers can pre-register on repositories such as PyPI and npm to distribute malicious code to developers who unknowingly install them. The piece synthesizes academic research measuring package-hallucination rates (5.2% for commercial and 21.7% for open-source models per Spracklen et al.) and defensive strategies. Details →First reported · updated · 2 reports bleepingcomputer.com
Who Vets AI’s Code? The Scale Challenge Facing Open Source Ingestion
A sponsored ActiveState article explains slopsquatting (AI package hallucination exploitation), where LLM coding assistants suggest non-existent package names that attackers then register on PyPI/npm with malicious payloads to be fetched by CI/CD pipelines. It cites a USENIX Security study across 16 code-generation models and 500,000+ samples, and a 2026 example where a hallucinated npm package name (react-codeshift) spread through forks to over 230 repositories. Details →First reported captechu.edu
AI-Driven Hallucinations in Cyber Supply Chain Lead to New Threat: Slopsquatting | Washington D.C. & Maryland Area | Capitol Technology University
A Capitol Technology University blog post describes 'slopsquatting,' a supply-chain threat in which AI code assistants hallucinate non-existent package names that attackers can pre-register with malicious code, causing developers who follow the AI's suggestions to install compromised dependencies. Details →First reported nvidia.com
How to Self-Host a Validated AI Coding Assistant with NVIDIA NeMo Guardrails
An NVIDIA developer blog tutorial walks through self-hosting a validated AI coding assistant using StarCoder2-7B NIM with NVIDIA NeMo Guardrails, adding a policy layer that refuses requests for human-only files, a CI stage that catches hallucinated package dependencies before review, commit-level traceability, and a metrics loop to measure AI-assisted defect rates. Details →How the wire is made
Poll & cluster
Internet is crawled for AI security news and near-duplicate coverage is embedded and grouped into durable items.
Curate
AI Agent filters for agentic-AI relevance, classifies and tags each item, scores severity for threats, and writes the summary.
Every item here is one machine-curated intelligence object, not a headline.
Read the wire for free. There is a small charge to ask the index questions.
The wire, open
The complete curated feed, no key required.
- GET /feed.xml — RSS 2.0, every item
- GET /api/items — read-only
The vector desk
Query the index by meaning, not just keyword.
- GET /api/items?tags=&minSeverity=&itemType=
- GET /api/search?q= — keyword
- GET /api/semantic?q= — vector