# hallusquatting-weaponizes-ai-package-hallucinations-for-malware-delivery: HalluSquatting Weaponizes AI Package Hallucinations for Malware Delivery

> HalluSquatting Weaponizes AI Package Hallucinations for Malware Delivery is a high-severity prompt injection issue in HalluSquatting Weaponizes AI Package Hallucinations for Malw, an AI agent.

- **Canonical URL:** https://catalog.anomity.ai/vuln/hallusquatting-weaponizes-ai-package-hallucinations-for-malware-delivery
- **Aliases:** ti-048
- **Severity:** high
- **Attack type:** Prompt injection, Supply chain compromise
- **Component:** HalluSquatting Weaponizes AI Package Hallucinations for Malw (AI agent)
- **Exploited in the wild:** no known exploitation
- **Published:** 2026-07-08
- **Last verified:** 2026-11-01
- **JSON:** https://catalog.anomity.ai/api/entries/vuln/hallusquatting-weaponizes-ai-package-hallucinations-for-malware-delivery

## Summary

Tel Aviv University, Technion, and Intuit researchers detailed HalluSquatting, which pre-registers the fake package and skill names that AI assistants reliably hallucinate, seeding them with malicious instructions so a routine request fetches attacker code. Assistants reached the same wrong name in up to 85% of repo requests and 100% of skill installs, turning hallucinations into scalable, botnet-style delivery.

## Affected versions

| Affected | Fixed in |
| --- | --- |
| see advisory | no fixed version listed |

## Am I affected by this vulnerability?

You are affected if HalluSquatting Weaponizes AI Package Hallucinations for Malw is installed or configured on a machine. Check the references for the exact versions.

## How do I fix it?

Pin and verify every package and skill name an AI assistant suggests before install, and disable auto-run modes that fetch resources without a permission check.

## How do I find every machine running HalluSquatting Weaponizes AI Package Hallucinations for Malw?

Anomity inventories the AI agents, MCP servers, IDE extensions and skills on each developer device, so you can see which machines run HalluSquatting Weaponizes AI Package Hallucinations for Malw and which version, then enforce a policy on it.

## References

- article: https://thehackernews.com/2026/07/new-hallusquatting-attack-could-trick.html

## Related vulnerabilities

- [trapdoor-cross-ecosystem-supply-chain-attack-poisons-ai-assistant](https://catalog.anomity.ai/vuln/trapdoor-cross-ecosystem-supply-chain-attack-poisons-ai-assistant) — critical
- [clinejection-cline-v2-3-0-supply-chain-attack-via-github-issue-bot](https://catalog.anomity.ai/vuln/clinejection-cline-v2-3-0-supply-chain-attack-via-github-issue-bot) — critical
- [load-mine-31-fake-qwen2-repositories-on-hugging-face-and-modelscope](https://catalog.anomity.ai/vuln/load-mine-31-fake-qwen2-repositories-on-hugging-face-and-modelscope) — high
- [forever-security-an-agents-md-planted-in-downloads-got-codex-to](https://catalog.anomity.ai/vuln/forever-security-an-agents-md-planted-in-downloads-got-codex-to) — high
- [microsoft-china-aligned-storm-0940-ran-the-artex-agentic-pen-test](https://catalog.anomity.ai/vuln/microsoft-china-aligned-storm-0940-ran-the-artex-agentic-pen-test) — high
- [CVE-2026-96893](https://catalog.anomity.ai/vuln/cve-2026-96893) — high

---

Source: Anomity Security Database (https://catalog.anomity.ai/vuln). Detect affected AI tools on developer devices: https://anomity.ai/?utm_source=catalog&utm_medium=vuln-md&utm_campaign=hallusquatting-weaponizes-ai-package-hallucinations-for-malware-delivery