Catch Hallucinated Dependencies (Slopsquatting) — Diwo Provenance

Diwo's Provenance is a vendor product landing page describing slopsquatting — a supply-chain attack where AI coding agents 'hallucinate' plausible but nonexistent package names, attackers register those empty names on PyPI or npm with malicious code, and a subsequent install executes attacker code inside a credentialed pipeline. The page explains its detection mechanism (reading dependency manifests like requirements.txt and package.json and checking whether each name resolves in a public registry) and cites catching a hallucinated 'pyodbc-binary' dependency.