HalluSquatting vulnerability exploits AI coding assistant hallucinations to deliver malware

Researchers identified a supply chain attack vector where AI coding assistants suggest non-existent software repositories, allowing attackers to register these names and distribute malicious code. The extent of active exploitation remains unquantified, but the vulnerability highlights systemic risks in AI-integrated development environments.