The AI told you to install a package that doesn't exist — that's a real attack

Code models sometimes invent library names, and attackers register those names to wait for you. The research behind it, and the one check that… Aliteq Syntax · Build Editor

Models can confidently name packages that don't exist

Research found this in a measurable share of generated code

Check every new dependency's page before installing

Before you let your tool install anything new, check the package page exists, links to a real repository, and is what the AI said it is. Ask the tool: "List every new dependency you added and link…

What this means for your app

Read the full story

Aliteq The AI told you to install a package that doesn't exist — that's a real attack Read the full story on Aliteq