🎯 Package hallucination

The items that name it 3

• Socket: New Study Identifies 53 Slopsquatting Targets Across 5 Frontier LLMs
  article2026-07-23

  LLMs generating code that references nonexistent packages on PyPI or npm; measured at rates of 4.62% to 6.10% across the five tested models

• garak v0.17.0 — LLM vulnerability scanner release
  repo

  attack/vulnerability technique where hallucinated package names are suggested in code imports, detected by packagehallucination detector

• garak v0.17.0 — adds EU AI Act risk-category mapping
  repo

  detects LLM-hallucinated software package names/imports; expanded to dart, perl, raku and dotted/indented imports