HalluSquatting attack tricks AI coding assistants into suggesting malware

Researchers detail HalluSquatting, an attack exploiting AI hallucinations to suggest non-existent package names that lead to malware installation. The method involves reverse-engineering likely hallucinated names and squatting them with malicious packages.