Why does my AI assistant recommend packages that turn out to be malware?
機会
When a code-generating model scaffolds a project, it invents package names at rates between 4.6% and 6.1% even on today's frontier models. Attackers register those hallucinated names as malicious packages before developers notice. Researchers studying five frontier models released between October 2025 and March 2026 found 127 package names all five models invent identically; 53 of them remain registrable by an attacker after each registry's existing defenses. No IDE plugin, no CI step, and no package manager checks whether a model-suggested package name was ever real before resolving it. The only current advice is to read every import manually, which no team does at scale.
重要な理由
Until there is a pre-install oracle that cross-references model-suggested names against real registry data, every AI-assisted build is one hallucinated import away from installing malware.
機会をどう評価するか
Opportunity Scoreは測定値ではなく、私自身の見解です。どれほど痛みを伴うか、どれほど頻繁に影響を与えるか、そして今日時点で解決策がいかに少ないか。スコアが高いほど、構築する価値が高いと私は考えています。
それが現れたときにどれほどの痛みをもたらすか。
実際にどれほど頻繁に人々がそれに直面するか。
今日時点で、それに対する優れたツールがいかに少ないか。