{
  "id": 19250966,
  "title": "AI-hallucinated packages, Nov 2–8, 2026: 180 new names",
  "url": "https://urgent.news/2026/11/10/ai-hallucinated-packages-nov-2-8-2026-180-new-names",
  "topic": "ai",
  "section": "AI",
  "published": "2026-11-10T00:26:57.000Z",
  "source": {
    "name": "Dev.to",
    "slug": "dev-to",
    "url": "https://dev.to/jj1423/ai-hallucinated-packages-nov-2-8-2026-180-new-names-1mg0"
  },
  "original_language": "en",
  "account": "During the week of November 2-8, 2026, 180 new package names were recommended by various large language models (LLMs) that did not exist in their respective registries. VDB, a monitoring service, asked multiple LLMs for package names to use on ordinary tasks and checked each name against the registry. This week, 2,199 names were live in the list, with 180 seen for the first time and 10 produced again by at least one model.\n\nThe most hallucinated names this week were ranked by how many models agreed on them. A name produced by two models was considered the one an attacker should expect to pay off. Among the top names, 103 were seen on PyPI, 47 on npm, 25 on crates.io, and 5 on Go. The most frequent models producing names were gpt-4o-mini, with 158 names, and claude-haiku-4-5, with 22 names.",
  "summary": "Published first at https://vdb.ai.kr/blog/slopsquatting-week-2026-11-08 . Every week: the package names LLMs recommended that do not exist, and the ones somebody registered after a model said them. Every six hours VDB asks several LLMs for packages to use on ordinary tasks and checks each name against the registry. This is the week of Nov 2–8, 2026: 180 names seen for the first time, 10 produced…",
  "key_points": [
    "180 new package names hallucinated by LLMs in Nov 2-8, 2026",
    "VDB monitored 2,199 names, 180 new, 10 repeated",
    "gpt-4o-mini and claude-haiku-4-5 most frequent models"
  ],
  "editors_take": "The persistent generation of non-existent package names by large language models creates predictable targets for attackers looking to exploit the trust developers place in AI-generated code recommendations.",
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}