AI_SLANG_ENTRY
Slopsquatting Meaning
The supply-chain scam where attackers register package names that AI coding tools tend to hallucinate, hoping a developer or agent installs the fake dependency.
What does Slopsquatting mean?
The supply-chain scam where attackers register package names that AI coding tools tend to hallucinate, hoping a developer or agent installs the fake dependency.
Slopsquatting is typosquatting for AI-generated code. Instead of guessing what a human might mistype, an attacker guesses what a model might invent.
Origin and usage
Blends 'slop' with typosquatting. The term spread through software-security circles as researchers documented LLMs inventing plausible package names in generated code.
Source type: wiki. Last checked: 2026-07-15.
Software-supply-chain slang with security research behind it; the linked reference summarizes the term history and points to package-hallucination studies.
Examples
- The model invented a helper library, and now security is worried about slopsquatting.
- Vibe coding gets riskier when the agent can install dependencies without checking the registry history.