slopsquatting

[ SLOP-skwot-ing ]noun

Registering a package name that AIs commonly invent, so that when one invents it, what arrives is the attacker's code.

Explanation

Built on typosquatting, where the bait is a spelling mistake. Here the bait is the machine's imagination. It is the reason to check every unfamiliar add-on against the version you actually installed, before you read a line of it.

Related words

• hallucination — When an AI confidently makes something up: a command, a quote, a setting, a fact that does not exist.
• prompt injection — An attack where something the AI reads — a web page, a file, a comment, a support ticket — contains instructions, and the AI just does what they say.

Prompts that deal with it

• Lock the Stack — Stop it choosing your tools for you
• Verify The Imports — It used something that does not exist
• Dependency Interrogation — Every add-on answers three questions