Developers Beware: Slopsquatting & Vibe Coding Can Increase Risk of AI-Powered Attacks

The report examines the emerging “slopsquatting” technique, where attackers exploit AI-generated hallucinations by registering non-existent software packages suggested by coding assistants, increasing the risk of malicious dependency installs. Citing academic research on high hallucination rates and repeatable fake package names across multiple LLMs, it warns that trends like “vibe coding” amplify exposure and recommends mitigations including manual package verification, dependency security tooling, scrutiny of new libraries, and avoiding copy-pasted install commands from AI outputs.