{
 "id": "AIR-2025-0052",
 "slug": "chatgpt-package-hallucination-supply-chain-risk",
 "title": "ChatGPT Package Hallucination Supply Chain Risk",
 "summary": "Researchers highlighted that LLMs can hallucinate non-existent package names, which attackers could register to distribute malicious code. Developers following the generated advice risk downloading compromised packages.",
 "type": "ai_enabled_attack",
 "categories": [
  "supply_chain",
  "other"
 ],
 "severity": 1,
 "targets": [
  "OpenAI",
  "framework_or_tooling"
 ],
 "products": [
  "ChatGPT"
 ],
 "incident_date": "2024-06",
 "incident_date_precision": "month",
 "first_reported": "2025-03-14",
 "sources": [
  {
   "url": "https://atlas.mitre.org/studies/AML.CS0022",
   "publisher": "MITRE ATLAS",
   "title": "ChatGPT Package Hallucination",
   "published_at": "2025-03-14"
  },
  {
   "url": "https://vulcan.io/blog/ai-hallucinations-package-risk",
   "publisher": "vulcan.io",
   "title": "Vulcan18's \"Can you trust ChatGPT's package recommendations?\"",
   "published_at": "2025-03-14"
  },
  {
   "url": "https://lasso.security/blog/ai-package-hallucinations",
   "publisher": "lasso.security",
   "title": "Lasso Security Research: Diving into AI Package Hallucinations",
   "published_at": "2025-03-14"
  },
  {
   "url": "https://incidentdatabase.ai/cite/731",
   "publisher": "AI Incident Database",
   "title": "AIID Incident 731: Hallucinated Software Packages with Potential Malware Downloaded Thousands of Times by Developers",
   "published_at": "2025-03-14"
  },
  {
   "url": "https://trendmicro.com/vinfo/us/security/news/cybercrime-and-digital-threats/slopsquatting-when-ai-agents-hallucinate-malicious-packages",
   "publisher": "Trend Micro",
   "title": "Slopsquatting: When AI Agents Hallucinate Malicious Packages",
   "published_at": "2025-03-14"
  }
 ],
 "source_count": 5,
 "confidence": 0.9,
 "status": "published",
 "origin": "seed_atlas",
 "tags": [
  "hallucination",
  "supply-chain",
  "package-squatting"
 ],
 "created_at": "2026-10-18T06:55:08.239Z",
 "updated_at": "2026-10-18T06:55:08.239Z"
}