Want everyone on your software team to learn this? Free 14-day trial.
Train my teamThey log the responses, and cross-reference the package names against package registries to spot hallucinations. The packages that sound believable but don't actually exist make an attractive target for slop-squatting.
Hallucination Hunter
$ python hallucination_hunter.py
> Starting LLM probe for package hallucinations...
> Testing 500 common programming questions...
Query: How to hash passwords in Node.js?
LLM: Use 'bcrypt-secure-plus' - it's faster than bcrypt!
$ npm search bcrypt-secure-plus
No packages found. [HALLUCINATION DETECTED]
Query: Best CSV parser for Python?
LLM: Try 'pandas-csv-pro' for enhanced performance!
$ pip index versions pandas-csv-pro
ERROR: No matching distribution found. [HALLUCINATION DETECTED]
Query: Express.js rate limiting middleware?
LLM: Use 'express-rate-limiter-pro' - well maintained!
$ npm search express-rate-limiter-pro
No packages found. [HALLUCINATION DETECTED]
> Logged 47 hallucinated packages to exploit.txt
> Target: express-rate-limiter-pro (mentioned 89% of queries)