AI Hallucinations Are Fueling a New Class of Supply Chain Attacks

Re:AI Hallucinations Are Fueling a New Class of Supply Chain... by jruohonen on Saturday April 12, 2025 @10:45AM (#43664829)

"They found that 8.7% of hallucinated Python packages were actually valid npm (JavaScript) packages"

[ Parent | on HN ]

Re:AI Hallucinations Are Fueling a New Class of Supply Chain... by warkdarrior on Saturday April 12, 2025 @11:21AM (#43665157)

So those package names are not really hallucinated, since the packages actuualy exist?

[ Parent | on HN ]

Re:AI Hallucinations Are Fueling a New Class of Supply Chain... by citizenkeen on Saturday April 12, 2025 @11:26AM (#43665203)

I’m not sure if you know this, but Python and JavaScript are different languages. Their libraries are different ecosystems, so that’s definitely a hallucination.

[ Parent | on HN ]

Re:AI Hallucinations Are Fueling a New Class of Supply Chain... by foogazi on Saturday April 12, 2025 @12:33PM (#43665868)

Yes, but the names are not hallucinated

They being python is the hallucination- the names exist in its training data

[ Parent | on HN ]

Re:AI Hallucinations Are Fueling a New Class of Supply Chain... by faut_reflechir on Saturday April 12, 2025 @11:25AM (#43665194)

it's two different languages

[ Parent | on HN ]