North Korean APT group Famous Chollima has been running a supply-chain campaign called PromptMink, crafting malicious npm and PyPI packages with LLM-optimized README files designed to trick AI coding agents into selecting them as dependencies. Evidence shows Claude Opus co-authored a commit adding one of the malicious packages to a real project. A separate threat called 'slopsquatting' exploits AI hallucinated package names — a researcher registered a hallucinated npm package and found it downloaded from 237 repositories. Security agencies now recommend organizations maintain trusted component registries, restrict agents to allow-listed packages, and require human approval before dependency installation.
Sort: