software supply chain security

Security Bite: Package Hallucination — What It Is and How to Fix It

AI coding assistants can suggest non-existent software packages that attackers register with malware, creating a vulnerability known as "package hallucination." This attack vector allows malicious packages to be installed, compromising the security of development projects.