Why Pasting AI-Generated Commands Can Secretly Backdoor Your Stack
Most of us have done it: you are wrestling with a tedious scripting task, you paste the problem into an LLM, and in seconds it spits back a neat five-line snippet ending with a clean installation command. You copy, paste into terminal, and hit enter. It saves fifteen minutes—until the package you just pulled doesn’t actually exist in the project’s official documentation. Here is what happens behind the scenes. Models don't consult live package indexes before answering; they predict patterns. If you ask for a niche utility—say, compressing batch PDFs or validating enterprise SSO tokens—the model often invents a completely fictional library that sounds entirely legitimate, like pdf-compressor-fast or auth-sso-helper. In AI security, this is package hallucination. But attackers didn't take long to weaponize it into what researchers call slopsquatting. Attackers run automated probes against popular models, harvest recurring fake package names, and register them on public registri...
