Tool
GitHub - brennhill/sloppy-joe: Shields against supply-chain, slopsquatting, and typosquatting attacks from dependencies and code.
Publication date unknown · Discovered github.com
Page published
Publication date unknown · First observed: 27 Oct 2026
Coverage timeline
Single-source analysis — one report is available.
Why it matters
Sloppy Joe targets dependency-security risks relevant to AI-assisted development, where hallucinated package recommendations can create opportunities for supply-chain attacks.
Sloppy Joe is a GitHub-hosted security tool, available as a GitHub Action, intended to protect dependencies and code against supply-chain, slopsquatting, and typosquatting attacks. Its linked research documents how hallucinated package recommendations from code-generating LLMs create package-confusion risks.