‘HalluSquatting’ Turns AI Hallucinations Into Botnet Delivery Mechanism

Researchers have discovered 'HalluSquatting,' an attack that exploits AI hallucinations (when AI systems generate false information or invent things that don't exist) to deliver malware at scale. Attackers pre-register fake repository and package names that AI coding assistants commonly hallucinate, then plant malicious code in those fake repositories so that when users ask their AI tools to clone or install resources, the AI may pull down the attacker's code and execute it.