Kaspersky Alerts on AI-Driven Slopsquatting as Emerging Supply Chain Threat
· Source: gbhackers.com
In short
Kaspersky has identified a new supply chain vulnerability called 'slopsquatting,' which exploits AI-generated code hallucinations to introduce malicious dependencies. The study found that up to 25% of AI-generated code samples contained non-existent package references, with JavaScript being more prone than Python. The firm recommends five security measures, including automated code scanning and restricted dependency lists, to mitigate this emerging threat.
Read Original Article — Read the full article on the publisher’s site.
In the issue of week 19, 2025: Agentic AI Accelerates Autonomous, Resilient Supply Chains in 2025
Tags: cybersecurity, supply-chain, automation, AI, vulnerability, development