·The mirago team
What Is Slopsquatting? The AI Supply-Chain Attack, Explained
Slopsquatting is a new supply-chain attack that weaponises the package names AI coding tools hallucinate. Here's how it works and how to defend against it.
Read →Topic
Security
Software supply-chain security for Python.
·The mirago team
Securing Your Python Supply Chain Against AI-Generated Dependencies
AI assistants are now a major source of new dependencies. Here's how to harden your Python supply chain against the risks they introduce.
Read →·The mirago team
Add mirago to CI: Block Fake Imports on Every Pull Request
Make import-checking automatic. Here's how to run mirago in GitHub Actions so an AI-invented package fails the build before it merges.
Read →·The mirago team
Typosquatting vs Slopsquatting: What's the Difference?
Typosquatting bets on your typos; slopsquatting bets on AI's hallucinations. Here's how the two supply-chain attacks differ — and overlap.
Read →·The mirago team
5 Signs an AI-Suggested Package Might Be Malicious
Not every real package is a safe one. Five red flags that an AI-suggested PyPI package could be a slopsquat — and how mirago spots them.
Read →