HalluSquatting attack uses AI coding tools to build botnets

The pull-based attack exploits LLM hallucinations to inject malicious commands into 9 popular AI coding assistants, including Cursor and GitHub Copilot. It can assemble massive botnets and perform DDoS attacks, a first for scalable prompt-injection exploits.