---
title: "Discussion on \"A package name from a code model is still an untrusted dependency\" | Hashnode"
description: "Discussion on \"A package name from a code model is still an untrusted dependency\". Are AI-generated code dependencies a real security risk?"
url: "https://hashnode.com/posts/slopsquatting-ai-package-hallucinations/6ae81440f4b618f8a8c1a968"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [A package name from a code model is still an untrusted dependency](https://buildopsy.hashnode.dev/slopsquatting-ai-package-hallucinations?utm_source=hashnode&utm_medium=feed)

Are AI-generated code dependencies a real security risk?

Nov 2 · 2 min read · buildopsy.hashnode.dev  
Read the article

-   [#ai-security](https://hashnode.com/tag/ai-security)
-   [#supply-chain](https://hashnode.com/tag/supply-chain)
-   [#security](https://hashnode.com/tag/security)
-   [#python](https://hashnode.com/tag/python)
-   [#javascript](https://hashnode.com/tag/javascript)
-   [#software-development](https://hashnode.com/tag/software-development)

## Written by

[Mukul Kumar](https://hashnode.com/@pydevgo)

@pydevgo

  
[View profile](https://hashnode.com/@pydevgo)

Engineering deep dives into system design, distributed systems, and the trade-offs behind real-world technology.

## Responses

Markdown supported · ⌘↵ to post

No responses yet.