LLMS CAN'T STOP MAKING UP SOFTWARE DEPENDENCIES AND SABOTAGING EVERYTHING

Summary from the TLDR InfoSec newsletter

AI coding assistants often hallucinate non-existent software packages, creating a security vulnerability called "slopsquatting." Attackers exploit this by creating malicious packages using these hallucinated names, so it is recommended for developers to double-check the package they are installing is the correct one.