Slopsquatting: when your AI invents the dependency and someone registers it
You ask a coding agent to add CSV export to your Node service. It writes the feature, runs its tests, then executes npm install csv-parser-plus. The install succeeds. The feature works. You merge it. csv-parser-plus does not exist. It has never existed. Your agent invented the name on the spot, and somebody registered it on npm last Tuesday. That's slopsquatting. Typosquatting, except nobody had to typo anything. The phantom restaurant Imagine a navigation app that, when it doesn't know a r
