Five frontier LLMs hallucinated the same fake package names in 200,000 coding prompts
nptacek · x · 2026-07-23
A report from the coding community warns that AI-suggested dependencies should be treated like pull requests from strangers.
Across roughly 200,000 coding prompts and five frontier LLMs, every model hallucinated the same nonexistent package names. The report says 53 of those names are still available to register on PyPI or npm, meaning one slopsquat can potentially affect users of all models.
More from coding & agent
- Cognition's SWE-2 uses a KKT duality argument in RL to shift the effort Pareto curve — YouJiacheng · 2026-09-11
- First-ever Three.js Conference lands in Paris, with a panel on AI-shortened design workflows — OdinLovis · 2026-09-11
- Data engineering, not agent frameworks, is the real bottleneck for enterprise AI agents — dhruv2038 · 2026-09-11
- RTK Terminal Compression Cuts Tokens but Leaves Your AI Coding Bill Unchanged — Bartaseth · 2026-09-11
- GPT-6 Astra beats Factorio with enemies in 44 in-game hours at ~$4,500 API cost — liminal_bardo · 2026-09-11
- Investment Analyst Asks How to Build a Claude-Based Diligence Agent Stack — Careless_Tie2286 · 2026-09-11