Researchers show HalluSquatting can make AI coding agents fetch fake repositories or skills and run attacker-supplied code.
There are plenty of dystopian films out there that are eerily similar to the Orwellian present, but one of the most uncanny ...
Fake CVE exploit repos pull frint and skytext packages to steal researcher credentials, with servers still live as of July 1.