Glossary · Phase 11 · Professional practice
Slopsquatting
Publishing a malicious package under a name AI tools tend to invent, hoping someone installs it.
Invented packages deserve special mention. Attackers register package names that models tend to invent, so a careless install runs their code. It's like a fake shop opening under a name people often misremember. This is sometimes called slopsquatting.
Try it now
You stay responsible for what ships, however it got written.
Learn it properly
Working with AI coding tools · Give agents good context, keep tasks small, and check every change they make. About 35 minutes.
Never trained an AI?
Teach a small one to write, right in your browser. It takes about 20 seconds and needs no account.