Slopsquatting

Slopsquatting is a type of cybersquatting. It is the practice of registering a non-existent software package name that a large language model (LLM) may hallucin

Slopsquatting
Sequence diagram of slopsquatting

Slopsquatting is a type of cybersquatting. It is the practice of registering a non-existent software package name that a large language model (LLM) may hallucinate in its output, whereby someone unknowingly may copy-paste and install the software package without realizing it is fake.[1] Attempting to install a non-existent package should result in an error, but some have exploited this for their gain in the form of typosquatting.[2]

The name is a portmanteau of "AI slop" and "typosquatting".[3]

History

In 2023, security researcher Bar Lanyado noted that LLMs hallucinated a package named "huggingface-cli".[4][5][6] While this name is identical to the command used for the command-line version of HuggingFace Hub, it is not the name of the package. The software is correctly installed with the code pip install -U "huggingface_hub[cli]". Lanyado tested the potential for slopsquatting by uploading an empty package under this hallucinated name. In three months, it had received over 30,000 downloads.[6] The hallucinated packaged name was also used in the README file of a repo for research conducted by Alibaba.[7]

In April 2025, the term was coined by Python Software Foundation Developer-in-Residence and security researcher Seth Larson and popularized by Andrew Nesbitt on Mastodon.[1][8]

In May 2025, the potential and prevalence of slopsquatting was detailed in the academic paper "We Have a Package for You! A Comprehensive Analysis of Package Hallucinations by Code Generating LLMs".[1][9] Some of the paper's main findings are that 19.7% of the LLM recommended packages did not exist, open-source models hallucinated far more frequently (21.7% on average, compared to proprietary / black-box models at 5.2%), CodeLlama 7B and CodeLlama 34B hallucinated in over a third of outputs, and across all models, the researchers observed over 205,000 unique hallucinated package names.

Prevention

To prevent being exploited by slopsquatting, package names should be manually verified and code that is AI-generated should never be assumed to be safe before being deployed to production environments.[8][10] Moreover, dependency scanners, lock files, and hash ID verifications to known and trusted package versions can be used.

Impact

Feross Aboukhadijeh, CEO of security firm Socket, warns that software engineers who are practicing vibe coding may be susceptible to slopsquatting and either using the code without reviewing it or the AI assistant tool installing the non-existent package.[2] As of July 2026, there has not yet been a reported case where slopsquatting has been used as a cyberattack.

See also

References

  1. ^ a b c "The Rise of Slopsquatting: How AI Hallucinations Are Fueling..." Socket. Retrieved 2025-04-14.
  2. ^ a b Claburn, Thomas (2025-04-12). "LLMs can't stop making up software dependencies and sabotaging everything". The Register. Retrieved 2025-04-14.
  3. ^ Cimpanu, Catalin. "Risky Bulletin: AI slopsquatting... it's coming! - Risky Business Media". www.risky.biz. Retrieved 2025-06-09.
  4. ^ Lanyado, Bar (2023-06-06). "Can you trust ChatGPT's package recommendations?". Vulcan. Retrieved 2025-06-10.{{cite web}}: CS1 maint: deprecated archival service (link)
  5. ^ Claburn, Thomas (2024-03-28). "AI hallucinates software packages and devs download them – even if potentially poisoned with malware". The Register. Retrieved 2025-04-14.
  6. ^ a b "Lasso Research: AI Package Hallucinations". Lasso Security. Retrieved 2025-05-06.
  7. ^ "Project Init · alibaba/GraphTranslator@4394d72". GitHub. Retrieved 2025-05-06.
  8. ^ a b "AI-hallucinated code dependencies become new supply chain risk". BleepingComputer. Retrieved 2025-06-10.
  9. ^ Spracklen, Joseph; Wijewickrama, Raveen; Sakib, A. H. M. Nazmus; Maiti, Anindya; Viswanath, Bimal; Jadliwala, Murtuza (2025-03-02), We Have a Package for You! A Comprehensive Analysis of Package Hallucinations by Code Generating LLMs, arXiv:2406.10279
  10. ^ Zorz, Zeljka (2025-04-14). "Package hallucination: LLMs may deliver malicious code to careless devs". Help Net Security. Retrieved 2025-06-10.

Content Disclaimer

Informasi ini disarikan dari Wikipedia dan disajikan kembali untuk tujuan edukasi. Konten tersedia di bawah lisensi CC BY-SA 3.0. Kami tidak bertanggung jawab atas ketidakakuratan data yang bersumber dari kontribusi publik tersebut.

  1. The information displayed on this website is sourced in part or in whole from Wikipedia and has been adapted for the purpose of restating it. We strive to provide accurate and relevant information, however:
  2. There is no guarantee of absolute accuracy. Wikipedia is an open, collaborative project that can be edited by anyone, so information is subject to change.
  3. It is not intended to constitute professional advice. The content displayed is for informational and educational purposes only. For important decisions (e.g., medical, legal, or financial), please consult a professional.
  4. Content copyright. Wikipedia is licensed under the Creative Commons Attribution-ShareAlike License (CC BY-SA). This means that content may be reused with appropriate attribution and shared under a similar license.
  5. Responsible use. Any risk arising from the use of information from this website is entirely the responsibility of the user.