Notes on AI-code security: slopsquatting, hallucinated packages, threat models.https://rajviyash9136freefr-tech.github.io/vibeshield/https://rajviyash9136freefr-tech.github.io/vibeshield/blog/slopsquatting-explained/https://rajviyash9136freefr-tech.github.io/vibeshield/blog/slopsquatting-explained/LLMs invent package names; attackers register them. What package hallucination is, the research behind it, and how to block the install path at PR time.Tue, 08 Sep 2026 00:00:00 GMT