I'm fascinated by the ways people are going to attempt to get their desired payload (an ad, a link, an idea) into other people's chat outputs. In this case, it seems that if a model hallucinates the name of a package, it may do so again, and if you happen to make available a real package using the hallucinated package's name, you might be able to get it downloaded.
Slopsquatting is a type of cybersquatting. It is the practice of registering a non-existent software package name that a large language model (LLM) may hallucinate in its output, whereby someone unknowingly may copy-paste and install the software package without realizing it is fake.[1] Attempting to install a non-existent package should result in an error, but some have exploited this for their gain in the form of typosquatting.[2]