08:17
2026-08-22
dev.to
ai-safety
Checking whether an npm package "exists" stopped working
A developer found that npm package existence checks are no longer effective against AI-hallucinated package names, which are being registered by attackers in a practice called 'slopsquatting'. The dev…