HalluSquatting Weaponizes AI Package Hallucinations for Malware Delivery
HalluSquatting Weaponizes AI Package Hallucinations for Malware Delivery is a high-severity prompt injection issue in HalluSquatting Weaponizes AI Package Hallucinations for Malw, an AI agent.
Is HalluSquatting Weaponizes AI Package Hallucinations for Malw running on your developers' machines? Anomity finds every device with this AI agent installed, shows the version, and can block it by policy. Detect this across your developers' devices with Anomity →
Key facts
- ID
hallusquatting-weaponizes-ai-package-hallucinations-for-malware-delivery- Severity
- high
- Attack type
- Prompt injection, Supply chain compromise
- Component
- HalluSquatting Weaponizes AI Package Hallucinations for Malw · AI agent
- Known exploited
- No known exploitation
- Published
- Last verified
What is this vulnerability?
Tel Aviv University, Technion, and Intuit researchers detailed HalluSquatting, which pre-registers the fake package and skill names that AI assistants reliably hallucinate, seeding them with malicious instructions so a routine request fetches attacker code. Assistants reached the same wrong name in up to 85% of repo requests and 100% of skill installs, turning hallucinations into scalable, botnet-style delivery.
Am I affected by this vulnerability?
You are affected if HalluSquatting Weaponizes AI Package Hallucinations for Malw is installed or configured on a machine. Check the references for the exact versions.
How do I fix it?
Pin and verify every package and skill name an AI assistant suggests before install, and disable auto-run modes that fetch resources without a permission check.
How do I find every machine running HalluSquatting Weaponizes AI Package Hallucinations for Malw?
Anomity inventories the AI agents, MCP servers, IDE extensions and skills on each developer device, so you can see which machines run HalluSquatting Weaponizes AI Package Hallucinations for Malw and which version, then enforce a policy on it.