Slopsquatting-AI-Generated Code Just Created a New Attack Surface.

When LLMs hallucinate package names, they create predictable typos — close to real packages, but not real.