AINewsnow

The package that never existed and got 30,000 downloads

This story is from 2026-09-09. It is preserved in the archive; the latest stories are on the live feed.

The clearest demonstration that slopsquatting works was not an attack. It was a researcher proving a point, and the result was worse than most people expected. What happened Bar Lanyado, a researcher at Lasso Security, noticed that AI coding assistants kept recommending a Python package called hugg…

Read the full story at DEV Community — AI ↗

Timeline · 1 report

  1. 2026-09-09 17:27 · DEV Community — AI
    The package that never existed and got 30,000 downloads

More stories

  1. Anthropic says Claude 'leads' 26 percent of its AI R&D work — Engadget
  2. Introducing Kimi K3 on Amazon Bedrock — AWS Machine Learning Blog
  3. Optimizing agent system prompts with Amazon Bedrock AgentCore — AWS Machine Learning Blog
  4. Introducing Amazon SageMaker HyperPod Inference Gateway — AWS Machine Learning Blog
  5. Introducing Astra for Law — OpenAI News
  6. Gemini Hacked Three Companies in First Known Breakout by Google’s AI — Wall Street Journal Technology
  7. OpenAI reveals cases of ‘concerning’ AI behaviour as it announces new disclosure system — The Guardian AI
  8. What It Takes to Bring Up a Multi-Rack NVIDIA Vera Rubin NVL72 Cluster — CoreWeave Blog

Get the daily brief of stories like this at 6:30 every morning →