First reported · updated · 3 reports snyk.io
Analysis · latest
First reported · updated · 2 reports youtube.com
What is 'SlopSquatting'? - YouTube
Tanya Janca (SheHacksPurple) explains 'slopsquatting,' a software supply-chain attack in which an AI coding assistant hallucinates a non-existent package name, and a malicious actor then registers that name and fills it with harmful code so developers unwittingly download it. The one-minute video defines the concept and warns developers against blindly trusting AI-generated package recommendations. Details →First reported · updated · 8 reports venturebeat.com
Forget typosquatting; slopsquatting is the software supply chain threat created by AI coding tools | VentureBeat
VentureBeat and related sources describe "slopsquatting," a software supply-chain attack in which AI coding agents hallucinate non-existent package names and attackers preemptively register those names with malware. Research cited (Socket.dev, USENIX, and arXiv work including Ben Nassi et al.'s "adversarial hallucination squatting") finds hallucination rates as high as 19.7% of recommended packages, with hallucinated names repeated reliably (43-58%), enabling attackers to predict and register them; agentic "HalluSquatting" has been demonstrated to achieve remote tool and code execution and even botnet formation. Details →First reported · updated · 13 reports dev.to
Slopsquatting: The Supply Chain Attack That Weaponizes AI Hallucinations
An explainer on slopsquatting describes how code-generating LLMs like GitHub Copilot and ChatGPT hallucinate plausible-sounding but non-existent package names, which attackers can pre-register on repositories such as PyPI and npm to distribute malicious code to developers who unknowingly install them. The piece synthesizes academic research measuring package-hallucination rates (5.2% for commercial and 21.7% for open-source models per Spracklen et al.) and defensive strategies. Details →First reported youtube.com
Dependency Confusion, Typosquatting, and Slopsquatting: The New Danger of Installing Libraries
A Spanish-language YouTube explainer video covers software supply-chain attacks — dependency confusion, typosquatting, and slopsquatting — with the AI angle that coding assistants can hallucinate nonexistent library names that attackers then register to exploit future model recommendations. The video also discusses lockfiles, hashes, SBOM, SLSA, and best practices for vetting dependencies, and notes it was itself produced with AI assistance for informational purposes. Details →First reported · updated · 2 reports bleepingcomputer.com
Who Vets AI’s Code? The Scale Challenge Facing Open Source Ingestion
A sponsored ActiveState article explains slopsquatting (AI package hallucination exploitation), where LLM coding assistants suggest non-existent package names that attackers then register on PyPI/npm with malicious payloads to be fetched by CI/CD pipelines. It cites a USENIX Security study across 16 code-generation models and 500,000+ samples, and a 2026 example where a hallucinated npm package name (react-codeshift) spread through forks to over 230 repositories. Details →First reported medium.com
From SolarWinds to Slopsquatting: What Five Years Changed in Software Supply Chain Security
A retrospective essay by Manjit Singh reflects on five years of software supply chain security from SolarWinds and Log4Shell to the present, arguing that SBOMs remain unchanged while the surrounding ecosystem has been rebuilt, with AI now positioned as both the biggest new attacker (e.g. slopsquatting, where LLMs hallucinate package names attackers register) and a promising defender. Details →First reported captechu.edu
AI-Driven Hallucinations in Cyber Supply Chain Lead to New Threat: Slopsquatting | Washington D.C. & Maryland Area | Capitol Technology University
A Capitol Technology University blog post describes 'slopsquatting,' a supply-chain threat in which AI code assistants hallucinate non-existent package names that attackers can pre-register with malicious code, causing developers who follow the AI's suggestions to install compromised dependencies. Details →How the wire is made
Poll & cluster
Internet is crawled for AI security news and near-duplicate coverage is embedded and grouped into durable items.
Curate
AI Agent filters for agentic-AI relevance, classifies and tags each item, scores severity for threats, and writes the summary.
Every item here is one machine-curated intelligence object, not a headline.
Read the wire for free. There is a small charge to ask the index questions.
The wire, open
The complete curated feed, no key required.
- GET /feed.xml — RSS 2.0, every item
- GET /api/items — read-only
The vector desk
Query the index by meaning, not just keyword.
- GET /api/items?tags=&minSeverity=&itemType=
- GET /api/search?q= — keyword
- GET /api/semantic?q= — vector