AI-hallucinated code dependencies become new supply chain risk
· Source: bleepingcomputer.com
In short
A new supply chain attack method called 'slopsquatting' has emerged due to generative AI tools hallucinating non-existent package names in coding examples. Research shows that 20% of AI-generated code samples recommend fake packages, with open-source LLMs being more prone to this issue. Security experts warn that these repeatable hallucinations create a predictable attack surface that could be weaponized by threat actors.
Read Original Article — Read the full article on the publisher’s site.
In the issue of week 15, 2025: Agentic AI Drives Autonomous, Resilient Supply Chains Amid New Security Threats
Tags: supply-chain, security, automation, coding, packages, AI-risk