AI Hallucination Squatting: The New Agentic Attack Vector

IT InstaTunnel Team Published by our engineering team AI Hallucination Squatting: The New Agentic Attack Vector AI Hallucination Squatting: The New Agentic Attack Vector “If your AI agent is reading documentation from an unverified tunnel, you aren’t just reading a guide — you’re running a remote shell for a stranger.” From Quirky Glitches to Supply-Chain Weapons In the early days of generative AI, hallucinations were seen as a quirky byproduct of probabilistic modelling — a chatbot confidently claiming that George Washington invented the internet. By 2024, these errors evolved into a genuine supply-chain threat. Researchers at the University of Texas at San Antonio, the University of Oklahoma, and Virginia Tech gave the phenomenon a name: Slopsquatting (a term coined by PSF Developer-in-Residence Seth Larson). The attack works by registering malicious packages on NPM or PyPI that AI models frequently imagine into existence. The numbers behind this are striking. In a landmark study pre