---
id: 1211
title: "Slopsquatting: AI's Contribution to Supply Chain Attacks"
source_domain: hackerone.com
source_url: "https://www.hackerone.com/blog/ai-slopsquatting-supply-chain-security"
published_at: "2025-07-16 19:56"
tags: ["ai-security", "supply-chain", "open-source", "llm", "vibe-coding", "supply-chain-security", "software-supply-chain", "slopsquatting", "ai-generated-code"]
phying_url: "https://phying.com/item/1211"
lang: en
---

# Slopsquatting: AI's Contribution to Supply Chain Attacks

## Summary

AI-generated code often imports packages that don't exist. In slopsquatting attacks, adversaries register these hallucinated names with malware, turning vibe coding into a supply chain risk.

## Intelligence Metadata

- **Sources:** hackerone.com
- **Published:** 2025-07-16 19:56
- **Original:** https://www.hackerone.com/blog/ai-slopsquatting-supply-chain-security
- **Phying News:** https://phying.com/item/1211