AML.T0011.001 sub-technique realized

Malicious Package

Sub-technique of AML.T0011 — User Execution

Adversaries may develop malicious software packages that when imported by a user have a deleterious effect. Malicious packages may behave as expected to the user. They may be introduced via AI Supply Chain Compromise. They may not present as obviously malicious to the user and may appear to be useful for an AI-related task.

> curated attacks (1)

Research high 2024-03-28

Slopsquatting: Weaponizing AI Package Hallucinations

Code-gen LLMs confidently invent non-existent package names — and repeat the same fake names reliably. Attackers register those hallucinated packages with malware, so developers who paste AI suggestions install the payload themselves.