AI HALLUCINATES SOFTWARE PACKAGES AND DEVS DOWNLOAD THEM – EVEN IF POTENTIALLY POISONED WITH MALWARE

Summary from the TLDR Web Dev newsletter

Researchers found that AI bots often invent fake software packages when asked for coding help. This is a security risk as a bad actor could create malware with the same invented package name, then trick developers relying on the AI's generated code into downloading and installing it.