LLM-powered coding assistants
Incidents implicated systems
Incident 7314 Report
Purportedly Hallucinated Software Packages with Potential Malware Reportedly Downloaded Thousands of Times by Developers
2023-12-01
Large language models have reportedly hallucinated non-existent software package names, some of which were subsequently uploaded to public repositories and incorporated into real codebases. In one case, a package named huggingface-cli, which was purported to have been originally suggested by an AI model, was downloaded more than 15,000 times. This dynamic enables what security researchers have termed "slopsquatting," in which attackers register hallucinated package names and introduce potential malware into software supply chains.
MoreIncident 17343 Report
AI Coding Agents Reportedly Exposed Over 13,000 Internal Images from Hundreds of Organizations on Public GitHub Code Repositories
2026-09-29
AI coding agents reportedly published over 13,000 internal images from more than 300 organizations on GitHub, a code-hosting platform, while preparing screenshots for code reviews. The exposed material reportedly included customer billing records and unreleased product features. Most images were hosted in public repositories under employees' personal accounts. The models involved were not named.
More