What is Slopsquatting
SMK·9 June 2026
Slopsquatting is a software supply-chain attack where malicious actors register non-existent package names that large language models (LLMs) frequently hallucinate. When developers blindly copy and paste AI-generated code or installation commands, they inadvertently download and execute malware from repositories like PyPI or npm.