Article

AI-Induced Supply-Chain Compromise: A Systematic Review of Package Hallucinations and Slopsquatting Attacks

2025-11-10

Abstract excerpt

<title>Abstract</title> <p>The adoption of large language models (LLMs) and AI‑assisted programming has accelerated software production, but it has also created a novel supply‑chain vulnerability: package hallucination. When an LLM generates code, it may recommend nonexistent third‑party packages that “sound” plausible. Adversaries can register these phantom names in public registries, thereby poisoning the open‑...

Topics

Open a Topic to create a Post that cites this publication.

Genotype

Identifiers and source

Literature Corpus work: f01d3ace-6a62-59ea-a1d8-7eaf203806e0
DOI: 10.21203/rs.3.rs-8007192/v1

Open publication

Related research

Semantic proximity does not establish scientific evidence.

Click a neighbor to travelStep 1 · 12 closest

AI-Induced Supply-Chain Compromise: A Systematic Review of Package Hallucinations and Slopsquatting AttacksDOI 10.21203/rs.3.rs-8007192/v1Read

A Systematic Review and Meta-Analysis of AI Transparency Gaps in Version Control Literature with a Proposed Taxonomy of Attribution FailuresSemantic proximity Read

Future of Release Management (Firmware/Software Delivery) in the Era of Generative AISemantic proximity Read

Intent-Driven Code Synthesis: Redefining Software Development with TransformersSemantic proximity Read

Coverage and Complementarity of Three Agentic AI Risk Taxonomies Across 131 Real World IncidentsSemantic proximity Read

Ghost in the Archive: When Machines Write, Machines Review, and We Merely ObserveSemantic proximity Read

Detection and Mitigation of Mythos-Class Frontier Model Capabilities: A Layered Reference ArchitectureSemantic proximity Read

Cognitive Integrity Security: Securing Human-AI Interaction in Large Language Model SystemsSemantic proximity Read

Variable Naming Impact on AI Code Completion: An Empirical StudySemantic proximity Read

Code is Cheap, Judgment is Not: The Rise of Integration Skill in the Age of AI-Written CodeSemantic proximity Read

Cognitive Integrity Security: Securing Human-AI Interaction in Large Language Model SystemsSemantic proximity Read

Naive Defect-Recidivism Mining Is Inflated by Agent Workflow Artefacts: A Construct-Validity Study at Corpus ScaleSemantic proximity Read

Invisible Text Injection: The Trojan Horse of AI-Assisted Medical Peer ReviewSemantic proximity Read