AIThe Hacker Newsabout 3 hours ago
HalluSquatting Attack Targets AI Coding Assistants
1 min read
Researchers demonstrated HalluSquatting, an attack that exploits AI coding assistant hallucinations. The attack registers fake names AI models reliably invent, then tricks assistants into fetching and running attacker-supplied code. Tests against Cursor, Windsurf, GitHub Copilot, Cline, Gemini CLI, and OpenClaw achieved up to 85% success on repository requests and 100% on skill installs.
Level
Hype check
Tap to vote and see what everyone thinks.
