Slopsquatting: AI's Contribution to Supply Chain Attacks
hackerone.com | incident | #ai-security | #supply-chain | #open-source | #llm | #vibe-coding | #supply-chain-security | #software-supply-chain | #slopsquatting | #ai-generated-code
Summary
AI-generated code often imports packages that don't exist. In slopsquatting attacks, adversaries register these hallucinated names with malware, turning vibe coding into a supply chain risk.
- Published
- Collected
--- id: 1211 title: "Slopsquatting: AI's Contribution to Supply Chain Attacks" source_domain: hackerone.com source_url: "https://www.hackerone.com/blog/ai-slopsquatting-supply-chain-security" published_at: "2025-07-16 19:56" tags: ["ai-security", "supply-chain", "open-source", "llm", "vibe-coding", "supply-chain-security", "software-supply-chain", "slopsquatting", "ai-generated-code"] phying_url: "https://phying.com/item/1211" lang: en --- # Slopsquatting: AI's Contribution to Supply Chain Attacks ## Summary AI-generated code often imports packages that don't exist. In slopsquatting attacks, adversaries register these hallucinated names with malware, turning vibe coding into a supply chain risk. ## Intelligence Metadata - **Sources:** hackerone.com - **Published:** 2025-07-16 19:56 - **Original:** https://www.hackerone.com/blog/ai-slopsquatting-supply-chain-security - **Phying News:** https://phying.com/item/1211