Mastodon Feed
Boosted by keul@fosstodon.org ("Luca Fabbri"):
janellecshane@wandering.shop ("Janelle Shane") wrote:
“Slopsquatting” in a nutshell:
1. LLM-generated code tries to run code from online software packages. Which is normal but
2. The packages don’t exist. Which would normally cause an error but
3. Nefarious people have made malware under the package names that LLMs make up most often. So
4. Now the LLM code points to malware.https://www.theregister.com/2025/04/12/ai%5Fcode%5Fsuggestions%5Fsabotage%5Fsupply%5Fchain/