AI models hallucinate identical fake package names, exposing supply-chain attack surface
A new arXiv study examined five frontier code-generating LLMs and found 127 fake package names that all models invented, with 53 still available on PyPI or npm. Those shared hallucinations give attackers a ready-made supply-chain foothold—slopsquatting—if developers blindly copy AI-suggested install commands.