Slopsquatting: When AI Invents the Package You Install
An AI assistant answers your question with a tidy diff and one new import. The package name sounds exactly like something that should exist, so you run the install command it suggested.
The package does exist now. It was registered last week by someone who noticed that assistants keep suggesting that name, and its install script ran before you had read a line of it.