Slopsquatting turns AI-hallucinated package names into a new supply chain risk for coding

Aug 19, 2026 · Issue 3 · 2 sources, 2 articles

AI assistants can recommend packages that do not exist, which attackers can then register. According to USENIX Security 2025, 19.7% of the suggested packages did not exist, and 43% recurred across runs.

Who is affected and how

senior developer

Package names recommended by AI must be verified before installation.

Narrative: The coding agent is the new attack surface

Sources

• Slopsquatting exposes a new software supply chain risk for AI codingnhimg.org · Aug 19, 2026
• Slopsquatting in the Supply Chain: Weaponized AI Hallucinationsgovtech.com · Aug 23, 2026

Machine-generated summary based on the titles and excerpts of the source articles. The facts come from the linked article.