Slopsquatting: How AI Coding Agents Enable a New Supply-Chain Attack

Attackers register hallucinated package names on npm and PyPI, exploiting AI coding agents that consistently import non-existent packages. The malicious packages execute install hooks with the developer's credentials, bypassing code review because the dependency appears legitimate. A new tool, LineageLens Trellis, gates these attacks by verifying registry metadata and detecting typosquatted names before commits.