Glossary
Slopsquatting
Registering the package names AI tools invent, and waiting.
What it means
Slopsquatting is a supply chain attack aimed at AI coding tools. Models hallucinate package names that sound right and do not exist. Attackers register those names and publish something malicious under them. The next model that suggests the name now suggests a real package, and an agent installs it without pausing.
A USENIX study of 2.23 million samples found 19.7 percent referenced a package that did not exist. A campaign in 2026 put 126 malicious packages on npm using exactly this route.
Nothing in a URL check can see your dependency tree. The defence is habit: read what your agent adds, check the package has a history and a repository, and use your platform's dependency scan. It belongs on the Release Gate checklist, not on a scan result.
Incidents where it mattered
No incident in the library maps to this one yet.
ShipReady is not a penetration test or a security certification. No automated check can prove an application is secure.
Last updated September 20, 2026