Researchers Weaponize AI Hallucinations Into Supply Chain Attack — 85% Hit Rate on Package Names
HalluSquatting technique turns predictable AI coding assistant hallucinations into a botnet delivery mechanism. Affects Cursor, Windsurf, Copilot, Cline, Gemini CLI, OpenClaw.