What is Slopsquatting

Slopsquatting is a software supply-chain attack where malicious actors register non-existent package names that large language models (LLMs) frequently hallucinate. When developers blindly copy and paste AI-generated code or installation commands, they inadvertently download and execute malware from repositories like PyPI or npm.