Unverified50% confidenceFactExact time
Typo-squatting is where attackers register real malicious packages under package names that models frequently hallucinate; multiple such supply chain attacks were documented in 2023.
1
Sources
50%
Confidence
Long-term
Relevance
10/11/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedTyposquatting is one of the most common techniques in supply chain attacks, where attackers register malicious packages with names extremely similar to popular packages to exploit developer typos and trigger malicious code.74% similarUnverifiedSince 2024, multimodal jailbreak attacks have begun to emerge, with attackers embedding malicious instructions in images or audio to bypass text-level safety detection.69% similarUnverifiedMultiple public cases in 2024 have demonstrated the feasibility of prompt injection attack vectors, including hijacking browser-controlling Agents via malicious web pages to execute fund transfers67% similarUnverified攻击者利用AI幻觉出的包名，提前在npm、PyPI等包注册表抢注并植入恶意代码，这种攻击手法被称为slopsquatting67% similarUnverifiedMalicious actors planting backdoored models or tampering with weights on platforms such as Hugging Face could constitute supply chain attacks.65% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/998999API
curl https://kongchang.com/api/v1/knowledge/claims/998999MCP
get_claim(id=998999)