[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$faL7LrdL8VAczmjXKH9pW_xfgY5XiIxoIHY__Jm4l3yQ":3},{"article":4,"iocs":54,"watch_terms":59,"solutions":60,"lesson":137},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":31,"category":32,"article_tags":36},"6dfd69e8-ab4f-46a7-b821-1999b98fc994","Slopsquatting, Phantom Domains, and HalluSquatting Are the Same AI Attack","slopsquatting-phantom-domains-and-hallusquatting-are-the-same-ai-attack-29cf88","Slopsquatting, phantom squatting, and HalluSquatting all exploit the same late-binding attack pattern, where AI coding agents trust hallucinated package, repo, or domain names. ActiveState explains how pre-fetch verification and governed dependency management can help stop these attacks before malicious code enters the pipeline. [...]","Slopsquatting, Phantom Domains, and HalluSquatting are identified as the same attack pattern where AI coding agents trust hallucinated package, repository, or domain names. Researchers have demonstrated that these fake names are predictable, allowing attackers to register them and inject malicious code into development pipelines without traditional exploits. This late-binding attack relies on AI models generating probable, yet unverified, identifiers, posing a significant risk to software supply chains.","Three AI attack names, Slopsquatting, Phantom Domains, and HalluSquatting, exploit the same hallucinated identifier","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fslopsquatting-phantom-domains-and-hallusquatting-are-the-same-ai-attack\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fposts\u002F2026\u002F07\u002F23\u002Factivestate-locks-header.jpg","2026-07-24T14:01:11+00:00","2026-07-24T16:00:13.548811+00:00",8,[17,20,22,24,26,28],{"name":18,"type":19},"Cursor","product",{"name":21,"type":19},"Windsurf",{"name":23,"type":19},"GitHub Copilot",{"name":25,"type":19},"Gemini CLI",{"name":27,"type":19},"OpenClaw",{"name":29,"type":30},"AI coding agents","technology","e7b231c8-5f79-4465-8d38-1ef13aea5a14",{"id":31,"icon":33,"name":34,"slug":35},null,"Threat Intelligence","threat-intelligence",[37,42,47,52],{"category":38},{"id":39,"icon":33,"name":40,"slug":41},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":43},{"id":44,"icon":33,"name":45,"slug":46},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":48},{"id":49,"icon":33,"name":50,"slug":51},"ade75414-7914-4e23-a450-48b64546ee70","Open Source","open-source",{"category":53},{"id":31,"icon":33,"name":34,"slug":35},[55],{"type":56,"value":57,"context":58},"malware","Cordyceps","Mentioned as an example of a composable exploit that bypassed traditional scans.",[18,21,23],{"controls":61,"vendors":136},[62,91,116],{"slug":63,"name":64,"problem":65,"products":66},"secrets-management","Secrets management","API keys, tokens and passwords stop leaking from code, chat and configuration files.",[67,75,83],{"vendor_slug":68,"vendor_name":69,"vendor_logo":70,"product_slug":71,"product_name":72,"url":73,"description":74},"hashicorp","HashiCorp","\u002Fvendor-logos\u002Fhashicorp.png","vault","HashiCorp Vault","https:\u002F\u002Fwww.hashicorp.com\u002Fen\u002Fproducts\u002Fvault","Secrets management with short-lived credentials and encryption as a service.",{"vendor_slug":76,"vendor_name":77,"vendor_logo":78,"product_slug":79,"product_name":80,"url":81,"description":82},"github","GitHub","\u002Fvendor-logos\u002Fgithub.png","advanced-security","GitHub Advanced Security","https:\u002F\u002Fgithub.com\u002Fsecurity\u002Fadvanced-security","Dependency review, code scanning and secret scanning with push protection.",{"vendor_slug":84,"vendor_name":85,"vendor_logo":86,"product_slug":87,"product_name":88,"url":89,"description":90},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","idira-secrets-management","Idira Secrets Management","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fidira\u002Fmachine\u002Fsecrets-management","Secrets management for applications, scripts and pipelines, from the former CyberArk portfolio.",{"slug":46,"name":92,"problem":93,"products":94},"AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",[95,103,111],{"vendor_slug":96,"vendor_name":97,"vendor_logo":98,"product_slug":99,"product_name":100,"url":101,"description":102},"hiddenlayer","HiddenLayer","\u002Fvendor-logos\u002Fhiddenlayer.png","hiddenlayer-ai-security","HiddenLayer AI Security Platform","https:\u002F\u002Fhiddenlayer.com\u002F","Model scanning, AI red teaming and runtime protection for AI applications.",{"vendor_slug":104,"vendor_name":105,"vendor_logo":106,"product_slug":107,"product_name":108,"url":109,"description":110},"boomi","Boomi","\u002Fvendor-logos\u002Fboomi.png","boomi-agentstudio","Boomi Agentstudio","https:\u002F\u002Fboomi.com\u002Fplatform\u002Fagentstudio\u002F","Agent builder whose Agent Control Tower registers and monitors Boomi agents and agents on Amazon Bedrock, Microsoft Copilot and other platforms, keeps audit logs and can switch agents off where the provider allows it.",{"vendor_slug":104,"vendor_name":105,"vendor_logo":106,"product_slug":112,"product_name":113,"url":114,"description":115},"boomi-ai-gateway","Boomi AI Gateway","https:\u002F\u002Fboomi.com\u002Fplatform\u002Fai-gateway\u002F","Gateway for AI model and MCP tool traffic, built on Lunar.dev technology. It limits which tools each agent can call. Its enterprise version adds an approval step for new MCP servers and logs each call with the user or agent behind it.",{"slug":117,"name":118,"problem":119,"products":120},"software-supply-chain","Software supply chain security","Malicious and vulnerable open-source packages are caught before they ship.",[121,129,130],{"vendor_slug":122,"vendor_name":123,"vendor_logo":124,"product_slug":125,"product_name":126,"url":127,"description":128},"jfrog","JFrog","\u002Fvendor-logos\u002Fjfrog.png","jfrog-curation","JFrog Curation","https:\u002F\u002Fjfrog.com\u002Fcuration\u002F","Blocks malicious and risky open-source packages before they enter your repositories.",{"vendor_slug":76,"vendor_name":77,"vendor_logo":78,"product_slug":79,"product_name":80,"url":81,"description":82},{"vendor_slug":131,"vendor_name":132,"vendor_logo":133,"product_slug":131,"product_name":132,"url":134,"description":135},"socket","Socket","\u002Fvendor-logos\u002Fsocket.png","https:\u002F\u002Fsocket.dev\u002F","Detects and blocks malicious and risky packages in npm, PyPI and other ecosystems.",[],{"slug":138,"title":139,"body":140,"framework_refs":141,"framework_notes":150},"ai-hallucinated-package-names-create-exploitable-supply-chain-attack-vector","AI Hallucinated Package Names Create Exploitable Supply Chain Attack Vector","AI coding assistants frequently hallucinate plausible-sounding but non-existent package names, repository paths, and domain names — and attackers can predict and pre-register these fake identifiers to inject malicious code. Because developers often trust AI-generated recommendations without independent verification, a single hallucinated dependency can silently compromise an entire development pipeline. This 'late-binding' attack requires no traditional exploit; the vulnerability is the unconditional trust placed in AI output. As AI-assisted development becomes ubiquitous, the attack surface for supply chain poisoning expands dramatically, affecting any organization that integrates AI coding agents into their workflows.",[142,143,144,145,146,147,148,149],"CIS Control 2: Inventory and Control of Software Assets","CIS Control 16: Application Software Security","NIST SP 800-161: Supply Chain Risk Management Practices","NIST SP 800-218: Secure Software Development Framework (SSDF) — PW.4 (Reuse Existing, Well-Secured Software)","NIST CSF 2.0: GV.SC-06 (Supply Chain Risk Management)","OWASP Top 10: A06:2021 – Vulnerable and Outdated Components","SLSA Supply Chain Levels for Software Artifacts — Level 2+ provenance requirements","ISO\u002FIEC 27036-3: Information security for supplier relationships — ICT supply chain",{}]