Frontier LLMs hallucinate identical nonexistent package names

// 2h agoNEWS

Frontier LLMs hallucinate identical nonexistent package names

An independent study found that five leading LLMs generated the exact same nonexistent package names across 200,000 coding prompts. Socket and PyPI Security discovered 53 of these hallucinated packages available for registration, exposing developers who blindly copy AI-generated code to a novel 'slopsquatting' vulnerability.

// ANALYSIS

This research exposes a critical intersection between AI hallucinations and supply chain security.

–"Slopsquatting" introduces a new attack vector that targets AI-assisted developers rather than traditional typosquatting victims.
–The fact that five different frontier models converge on the exact same hallucinated package names suggests a systemic issue, likely stemming from shared training data or architectural similarities.
–This underscores the urgent need for developers to verify AI-generated dependencies and for package registries to proactively monitor and block hallucinated package names.

// TAGS

aillmsecuritysupply-chainslopsquattingpypinpmhallucinations

DISCOVERED

2h ago

2026-07-22

PUBLISHED

3h ago

2026-07-22

RELEVANCE

8/ 10

AUTHOR

SocketSecurity

// KEEP READING

More AI developer news from the feed

EXPLORE FULL FEED

LAUNCH16m ago

Synara previews open-source AI agent desktop workspace

Synara Orchestrator is an open-source, local-first desktop workspace that integrates various CLI AI coding tools—such as Claude Code, Cursor, and Gemini CLI—into a single interface. Operating as an orchestration and scheduling layer, it enables developers to manage terminal sessions, code diffs, and browser previews while running parallel agent workflows in isolated Git worktrees without workspace interference.

TUTORIAL53m ago

Andrew Ng Releases Agentic Knowledge Graphs Course

AI pioneer Andrew Ng released a free 1-hour course dedicated to building agentic knowledge graphs from scratch. The course teaches developers how to construct structured memory layers for AI agents, enabling improved long-term reasoning, contextual understanding, and factual grounding beyond traditional vector retrieval methods.

UPDATE1h ago

Cursor launches Cursor Router to cut model costs

Cursor has launched Cursor Router, a dynamic model routing feature that directs complex coding tasks to frontier AI models while assigning routine queries to cost-efficient alternatives. Available on Teams and Enterprise plans, it delivers up to a 60% cost reduction with configurable optimization modes and administrative controls.