Purportedly Hallucinated Software Packages with Potential Malware Reportedly Downloaded Thousands of Times by Developers
Date: 2023-12-01
Affected: Bar Lanyado, Bigscience, Cohere, Deepseek Ai, Developers Using Ai Generated Suggestions, Google, Meta, Openai
Attack vector: supply-chain
Category: real-world
Severity: High

AI Incident Database (AIID) entry #731: Purportedly Hallucinated Software Packages with Potential Malware Reportedly Downloaded Thousands of Times by Developers. Alleged deployer/developer: Bar Lanyado, Bigscience, Cohere, Deepseek Ai, Developers Using Ai Generated Suggestions, Google, Meta, Openai. See the linked AIID entry for full narrative, sourcing, and classification.


Mitigations:

Architectural layers (MAESTRO):