{"slug": "top-ais-invent-same-fake-pypl-and-npm-package-names", "title": "Top AIs invent same fake PyPl and npm package names", "summary": "Researcher Aleksandr Churilov found that five top AI coding tools—Claude Sonnet 4.6, Claude Haiku 4.5, GPT-5.4-mini, Gemini 2.5 Pro, and DeepSeek V3.2—hallucinate the same 127 nonexistent package names, with 53 still available for registration on PyPI and npm as of April 2025, posing a slopsquatting risk where attackers could create malicious packages matching those names.", "body_md": "Enterprise software developers continue to be in danger of falling victim to slopsquatting, where AI coding tools hallucinate the existence of nonexistent libraries and hackers create malicious packages in response.\n\nThe top AI coding tools are remarkably consistent in their hallucinations: Researcher Aleksandr Churilov found the same 127 fake package names generated by five different LLMs.\n\n[Slopsquatting is a relatively new form of malware attack](https://www.csoonline.com/article/3961304/ai-hallucinations-lead-to-new-cyber-threat-slopsquatting.html) that involves the creation of malicious packages in response to the hallucinations of AI coding tools, causing the malicious packages to be incorporated into legitimate applications.\n\nChurilov set out his findings in a research paper, [The Range Shrinks, the Threat Remains: Re-evaluating LLM Package Hallucinations on the 2026 Frontier-Model Cohort](https://arxiv.org/abs/2605.17062), which is yet to be peer-reviewed. He found 127 hallucinated package names were shared across Claude Sonnet 4.6, Claude Haiku 4.5, GPT-5.4-mini, Gemini 2.5 Pro, and DeepSeek V3.2.\n\nAs of April this year, 53 of those names — 41 on the PyPI software repository and 12 on npm —are still available for registration.\n\nAccording to the study, there are two reasons for this amount of conformity in the output of the models. First, models may learn the same incorrect package references from shared public training material, such as tutorials and documentation.\n\nSecond, they may independently extrapolate plausible names from ecosystem conventions. In this way, they could produce names that look correct, even if they don’t actually exist.\n\nWhile Churilov’s research will worry CISOs and security-conscious developers, there is some relief. The research has not yet found any evidence that any of the remaining 53 names have been registered maliciously, nor used in an attack.", "url": "https://wpnews.pro/news/top-ais-invent-same-fake-pypl-and-npm-package-names", "canonical_source": "https://www.infoworld.com/article/4200884/top-ais-invent-same-fake-pypl-and-npm-package-names.html", "published_at": "2026-07-24 10:36:17+00:00", "updated_at": "2026-07-24 10:54:24.811233+00:00", "lang": "en", "topics": ["ai-safety", "ai-tools", "developer-tools"], "entities": ["Aleksandr Churilov", "Claude Sonnet 4.6", "Claude Haiku 4.5", "GPT-5.4-mini", "Gemini 2.5 Pro", "DeepSeek V3.2", "PyPI", "npm"], "alternates": {"html": "https://wpnews.pro/news/top-ais-invent-same-fake-pypl-and-npm-package-names", "markdown": "https://wpnews.pro/news/top-ais-invent-same-fake-pypl-and-npm-package-names.md", "text": "https://wpnews.pro/news/top-ais-invent-same-fake-pypl-and-npm-package-names.txt", "jsonld": "https://wpnews.pro/news/top-ais-invent-same-fake-pypl-and-npm-package-names.jsonld"}}