AI coding agents vulnerable to ‘HalluSquatting’ malware attacks
Researchers demonstrate "HalluSquatting," where AI coding assistants hallucinate nonexistent package names that attackers register with malicious code. When the assistant automatically installs the fake package, it injects malware into developer environments, enabling botnet creation at scale.