Okay honestly this makes vibe coding into production very dangerous, you guys were all right I think what I'll do is cut off all access to DBs and run it as a user with almost no privileges
#### Basel Ismail
@BaselIsmail · 1d ago
URGENT PSA - New supply chain attack vector that I found WILD > AI LLMs hallucinate package names roughly 18-21% of the time. Hackers have started pre-registering those hallucinated names on PyPI and npm with malicious payloads; they call it "slopsquatting"
You can only imagine what's next
01:21
50
146
1,043
199.6K
83 Replies
29 Retweets
606 Likes
116.6K Views 
One Sentence Summary
@levelsio responds to the 'slopsquatting' security threat by proposing a principle of least privilege strategy for AI-assisted coding environments.
Summary
The tweet addresses the security risks of 'vibe coding' (AI-assisted development) in light of the 'slopsquatting' vulnerability, where AI models hallucinate package names that hackers then exploit. The author acknowledges the danger and suggests a practical mitigation: restricting database access and running AI-generated code with minimal user privileges.
AI Score
82
Influence Score 151
Published At Today
Language
English
Tags
AI Coding
Security
Slopsquatting
DevOps
Cybersecurity