HalluSquatting Exploits AI Coding Assistants to Deliver Malware

Researchers have developed HalluSquatting, an attack that exploits AI coding assistants' tendency to hallucinate package names. By registering fake names that models reliably invent, attackers can trick developers into installing malicious code. The technique targets tools like GitHub Copilot and could lead to widespread botnet infections.