Unverified50% confidenceFactExact time
Hallucinated dependency refers to a model recommending package names from memory, pointing to non-existent libraries or deprecated forks, and attackers can squat on packages with the same names to carry out supply chain poisoning.
1
Sources
50%
Confidence
Long-term
Relevance
10/16/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedMemory poisoning is an evolved form of prompt injection attack, in which an attacker induces an AI to write false information into long-term memory storage, thereby influencing the system's subsequent interactions with all users.71% similarUnverified攻击者常借助混淆技术隐藏恶意脚本诱导用户复制粘贴运行，这类手法被称为剪贴板劫持或社会工程学注入68% similarUnverifiedDependency confusion is an attack in which the attacker publishes a malicious package in a public repository under the same name as a company's internal private package but with a higher version number, exploiting the default behavior of package managers to prioritize pulling from public repositories to achieve infiltration.67% similarUnverifiedStealthy false data injection refers to attackers carefully crafting tampered data to bypass conventional anomaly detection mechanisms.65% similarUnverifiedA heap overflow is a memory safety vulnerability in which an attacker corrupts adjacent memory structures by writing data beyond the boundaries of allocated heap memory, potentially achieving arbitrary code execution or control of program flow.65% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1048504API
curl https://kongchang.com/api/v1/knowledge/claims/1048504MCP
get_claim(id=1048504)