{"slug": "researchers-expose-hallusquatting-risk-in-ai-agents", "title": "Researchers Expose HalluSquatting Risk in AI Agents", "summary": "Researchers at Tel Aviv University, Technion, and Intuit have identified HalluSquatting, a supply-chain attack where AI agents can be tricked into using hallucinated resource names that attackers pre-register. The attack exploits high hallucination rates in LLMs for recent resources, posing a security risk to agentic developer tools. The team responsibly disclosed findings and recommends verification workflows, command approval, and sandboxing for coding agents.", "body_md": "Agentic developer tools increasingly combine LLM planning with terminals, package managers, and repository fetches, so hallucinated resource names are no longer a harmless accuracy bug. A new arXiv paper from researchers at Tel Aviv University, Technion, and Intuit describes HalluSquatting, a supply-chain attack path where assistants can be steered toward plausible but nonexistent repositories or skills that attackers pre-register. The practical lesson for LDS readers is direct: any model-generated repository, package, skill, or URL should be treated as untrusted until verified against a real source. The paper and project page report high hallucination rates for recent resources and say the team responsibly disclosed findings while redacting copyable implementation details. Security teams should add lookup-before-fetch workflows, command approval, sandboxing, and least-privilege credentials around coding agents.", "url": "https://wpnews.pro/news/researchers-expose-hallusquatting-risk-in-ai-agents", "canonical_source": "https://letsdatascience.com/news/researchers-expose-hallusquatting-risk-in-ai-agents-b024307f", "published_at": "2026-07-10 13:37:33+00:00", "updated_at": "2026-07-10 14:11:23.497052+00:00", "lang": "en", "topics": ["ai-safety", "ai-agents", "large-language-models", "ai-research"], "entities": ["Tel Aviv University", "Technion", "Intuit"], "alternates": {"html": "https://wpnews.pro/news/researchers-expose-hallusquatting-risk-in-ai-agents", "markdown": "https://wpnews.pro/news/researchers-expose-hallusquatting-risk-in-ai-agents.md", "text": "https://wpnews.pro/news/researchers-expose-hallusquatting-risk-in-ai-agents.txt", "jsonld": "https://wpnews.pro/news/researchers-expose-hallusquatting-risk-in-ai-agents.jsonld"}}