TLDR InfoSec · MISCELLANEOUS

DIVING DEEPER INTO AI PACKAGE HALLUCINATIONS

lasso-security.webflow.io9 min read

Summary from the TLDR InfoSec newsletter

AI Package Hallucination exploits LLMs like ChatGPT and Gemini to spread non-existent, potentially malicious packages through recommendations. Extensive testing on the GPT-3.5 Turbo model with 457 questions across 40 subjects in two programming languages revealed a concerning 30% hallucination rate.