Slopsquatting: The Newest Threat to Your AI-Generated Code
The New Stack article, published April 16, 2025, examines slopsquatting, a risk where AI code generators suggest nonexistent package names that attackers can register. Casey Ellis, founder of Bugcrowd, tells the publication that developers are focused on making code work rather than preventing unintended behavior, a misalignment AI code generation accelerates.
Source description, as published
As AI code generation booms, new research reveals how "slopsquatting" exploits hallucinated package names, creating hidden security risks even experienced developers might miss.
Inventors / authors: Jeffrey Burt