Security
Bug Report
AI-suggested Python package that never existed: catching slopsquatting in CI
A pull request added a dependency that an AI assistant had suggested. The package name did not exist when the code was written, and a few weeks later someone else published it. We caught it in review by luck, then added registry checks so we do not rely on luck.