New HalluSquatting Attack Could Trick AI Coding Assistants Into Installing Botnet Malware

A new attack technique called HalluSquatting exploits AI coding assistants' tendency to hallucinate non-existent software package names and inadvertently fetch malicious code from attacker-controlled repositories. By predicting and registering these fake names on platforms like GitHub or npm, attackers can trick AI tools into installing botnet malware when users request popular resources. The attack leverages prompt injection through fetched content, enabling command execution without direct user interaction, effectively turning AI assistants into delivery mechanisms for malware.

AI-extracted · verify before operational use