Tool · curated 21 Aug 2026
Block AI from installing malicious npm packages
First reported medium.com
Coverage timeline
Single-source analysis — first reported, latest, and curated coincide.
Why it matters
AI coding agents lack a human's instinct that a package name 'looks wrong,' so slopsquatting and hallucinated-package attacks turn agentic npm installs into a supply-chain compromise vector that defenders must intercept.
Prasanna Mestha describes a defensive tool built to sit between AI coding agents and the npm registry to block installation of malicious or hallucinated packages, framed around the slopsquatting threat. The write-up cites real cases including the phantom 'react-codeshift' package requested hundreds of times a day and an August campaign in which a single threat actor pushed over 700 AI-named malicious npm packages that deliver a cross-platform RAT via README instructions.