Slopsquatting in a Nutshell

“Slopsquatting” in a nutshell: 1. LLM-generated code tries to run code from online software packages. Which is normal but 2. The packages don’t exist. Which would normally cause an error but 3. Nefarious people have made malware under the package names that LLMs make up most often. So 4. Now the LLM code points to malware. theregister.com/2025/04/12/ai_... LLMs can't stop making up software dependencies and sabotaging everything By Thomas Claburn

A social media post explains how AI-generated code can invent nonexistent software package names, which attackers may register as malware, causing the code to point to malicious dependencies. The colorful image of a human head filled with swirling clouds represents the confused and dangerous reasoning behind the joke. This meme is used to mock unreliable AI coding tools and supply-chain security risks. EN: A social media post explains how AI-generated code can invent nonexistent software package names, which attackers may register as malware, causing the code to point to malicious dependencies. The colorful image of a human head filled with swirling clouds represents the confused and dangerous reasoning behind the joke. This meme is used to mock unreliable AI coding tools and supply-chain security risks.

• @gentoomemes / 16863 2025-04-13