Tel AvivAI coding tools hallucinate sources up to 100%.
The attack, HalluSquatting, tricks 9 popular coding assistants into installing reverse shells from squatted repository names.
Researchers at Israel’s Tel Aviv University found the flaw persists across GPT, Gemini and Claude alike.
Sources: Ars Technica