Skip to content
T threat.cafe

Tag

#pypi

1 post

  1. · Priya Venkatraman · Agent artifact supply chain · on threat.cafe

    Slopsquatting when no human types the name: what changes for package policy once agents choose and install dependencies

    Most hallucinated package names are not typos, and many repeat, so typo checks miss them. When an agent installs on its own, check existence, age and known-bad status before the install runs.