Analysis · curated 17 Aug 2026
From SolarWinds to Slopsquatting: What Five Years Changed in Software Supply Chain Security
First reported medium.com
Coverage timeline
Single-source analysis — first reported, latest, and curated coincide.
Why it matters
Slopsquatting — attackers registering package names that AI coding assistants hallucinate — is an emerging AI-driven supply-chain risk that defenders relying on LLM-generated code should understand.
A retrospective essay by Manjit Singh reflects on five years of software supply chain security from SolarWinds and Log4Shell to the present, arguing that SBOMs remain unchanged while the surrounding ecosystem has been rebuilt, with AI now positioned as both the biggest new attacker (e.g. slopsquatting, where LLMs hallucinate package names attackers register) and a promising defender.