M1rwana12/ghostpkg

enhancement good first issue

0

Catch AI-hallucinated package names before you install them

Python

#agentic-ai#ai#ai-security#cli#dependencies#dependency-management#devsecops#hallucination#llm#npm#package-manager#pypi#python#security#security-tools#slopsquatting#supply-chain#supply-chain-security#typosquatting#zero-dependency

The hard case: a hallucinated name the attacker already registered 21 days ago

help wanted open-problem

M1rwana12/ghostpkg

0

Catch AI-hallucinated package names before you install them

Python

#agentic-ai#ai#ai-security#cli#dependencies#dependency-management#devsecops#hallucination#llm#npm#package-manager#pypi#python#security#security-tools#slopsquatting#supply-chain#supply-chain-security#typosquatting#zero-dependency

npm typosquat detection is weak: the popular-name list is PyPI-only 21 days ago

enhancement good first issue

M1rwana12/ghostpkg

0

Catch AI-hallucinated package names before you install them

Python

#agentic-ai#ai#ai-security#cli#dependencies#dependency-management#devsecops#hallucination#llm#npm#package-manager#pypi#python#security#security-tools#slopsquatting#supply-chain#supply-chain-security#typosquatting#zero-dependency

Cache registry lookups 21 days ago

enhancement good first issue

M1rwana12/ghostpkg

0

Catch AI-hallucinated package names before you install them

Python

#agentic-ai#ai#ai-security#cli#dependencies#dependency-management#devsecops#hallucination#llm#npm#package-manager#pypi#python#security#security-tools#slopsquatting#supply-chain#supply-chain-security#typosquatting#zero-dependency

Open Issues Need Help