# AI-hallucinated packages, Nov 2–8, 2026: 180 new names

Source: [DEV Community: python](https://dev.to/jj1423/ai-hallucinated-packages-nov-2-8-2026-180-new-names-1mg0) · 2026-11-10 · Languages
Page: https://themorning.dev/story/ai-hallucinated-packages-nov-2-8-2026-180-new-names-313abc15c1fc846a
Kind: research · Impact: medium

## In brief

- A weekly tracker recorded 180 new AI-hallucinated package names for Nov 2–8, 2026.
- The tracker queries several LLMs every six hours for packages on ordinary tasks and logs names that do not exist.
- Some of these hallucinated names were later registered by someone after a model suggested them.

## Why it matters

Developers who copy package names from LLM output can install packages that do not exist or that were registered by attackers, a risk known as slopsquatting.

## What to do

- Verify that every package name suggested by an LLM exists and is the intended project before installing it

## Timeline

- 2026-11-08: Week of Nov 2–8 tracked by VDB; 180 new hallucinated package names recorded
- 2026-11-10: Summary published on DEV Community

## Coverage

- [AI-hallucinated packages, Nov 2–8, 2026: 180 new names](https://dev.to/jj1423/ai-hallucinated-packages-nov-2-8-2026-180-new-names-1mg0) — DEV Community: python, 2026-11-10

Tags: slopsquatting, ai-hallucination, package-security, supply-chain, llm

---

Brief generated by AI (claude-haiku-5-5) from the reporting listed under Coverage. Headlines belong to their publishers. The Morning Dev – https://themorning.dev