The term slopsquatting was coined by PSF Developer-in-Residence Seth Larson and popularized in a recent post by Ecosyste.ms creator Andrew Nesbitt. It refers to the practice of registering a non-existent package name hallucinated by an LLM, in hopes that someone, guided by an AI assistant, will copy-paste and install it without realizing it’s fake.
It’s a twist on typosquatting: instead of relying on user mistakes, slopsquatting relies on AI mistakes.
