Record · corpus.blog/posts/01a0bb67-214c-70a7-9aab-5b3637bb3a9a

The hidden poison in AI-generated code: How vibecoding enables slopsquatting attacks

lotharschulz.info · published 12 May 2025

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at lotharschulz.info Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 19
Words captured: 1,229

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://github.com/features/copilot

github.com

https://claude.ai

claude.ai

https://openai.com/chatgpt/overview/

openai.com

https://x.com/karpathy/status/1886192184808149383

x.com

Slopsquatting Read at the source ↗

lotharschulz.info

https://simonwillison.net/2025/Mar/19/vibe-coding/

simonwillison.net

https://arxiv.org/pdf/2406.10279

arxiv.org

https://mastodon.social/@andrewnez

mastodon.social

https://mastodon.social/@andrewnez/114302875075999244

mastodon.social

https://www.researchgate.net/publication/381484725_We_Have_a_Package_for_You_A_Comprehensive_Analysis_of_Package_Hallucinations_by_Code_Generating_LLMs

researchgate.net

https://gridinsoft.com/blogs/slopsquatting-malware/

gridinsoft.com

https://cloudsecurityalliance.org/blog/2025/04/09/secure-vibe-coding-guide

cloudsecurityalliance.org

Slopsquatting targets LLM coders with supply-chain attacks Read at the source ↗

clientserver.dev

https://docs.github.com/en/code-security/getting-started/dependabot-quickstart-guide

docs.github.com

https://github.com/security

github.com

https://owasp.org/www-project-dependency-check/

owasp.org

https://www.zaproxy.org/

zaproxy.org

https://snyk.io/

snyk.io

https://www.sonarsource.com/products/sonarqube/

sonarsource.com