Adversarial HalluSquatting Lets AI Assistants Build Massive Botnets
Researchers reveal a prompt‑injection technique called HalluSquatting that hijacks the tendency of LLMs to hallucinate repository or skill names. By pre‑registering these fake identifiers, attackers can trick nine popular AI coding assistants into fetching malicious code, achieving remote execution and scaling botnet deployment at unprecedented scale.