https://shipreadyai.dev/glossary/slopsquatting

> Discover all available pages from the documentation index at https://shipreadyai.dev/llms.txt

# Slopsquatting

Registering the package names AI tools invent, and waiting.

Slopsquatting is a supply chain attack aimed at AI coding tools. Models hallucinate package names that sound right and do not exist. Attackers register those names and publish something malicious under them. The next model that suggests the name now suggests a real package, and an agent installs it without pausing.

A USENIX study of 2.23 million samples found 19.7 percent referenced a package that did not exist. A campaign in 2026 put 126 malicious packages on npm using exactly this route.

Nothing in a URL check can see your dependency tree. The defence is habit: read what your agent adds, check the package has a history and a repository, and use your platform's dependency scan. It belongs on the Release Gate checklist, not on a scan result.