HalluSquatting turns AI package hallucinations into a supply chain attack

The attack registers package names that coding assistants hallucinate. When developers install them, fake dependencies can become malware delivery channels.