Skip to content
RansomLeak RansomLeak
Blog

ai coding assistant

1 post with the tag “ai coding assistant”

Slopsquatting: When AI Invents the Package You Install

Slopsquatting shown as an install of a package an AI assistant invented, whose postinstall script runs at once, next to a registry check that reveals one version and no source repository
Dmytro Koziatynskyi
Founder & CEO

An AI assistant answers your question with a tidy diff and one new import. The package name sounds exactly like something that should exist, so you run the install command it suggested.

The package does exist now. It was registered last week by someone who noticed that assistants keep suggesting that name, and its install script ran before you had read a line of it.