Slopsquatting candidates — names attackers will target next
Package names multiple LLMs repeatedly hallucinate are exact targeting information for attackers — "register this and someone will install it". We see those names before attackers do.
How we detect
We regularly run a matrix of hundreds of programming prompts through major LLMs (Claude, GPT, Gemini, Llama) and harvest the package names they recommend. Cross-model agreement raises the target score. The registry status is checked live against npm/PyPI/crates.io for (1) non-existence, (2) recent registration with suspicious patterns, and (3) empty wrappers around famous names.
Bulk package check
Paste package names suggested by an LLM, one per line. Flagged candidates appear below.
| id | purl | risk | summary |
|---|---|---|---|
| VDB-SLOP-cratesio-cbfbcdc172 | pkg:cargo/cyclonedx-model | high | Slopsquatting candidate: cyclonedx-model (crates.io) |
| VDB-SLOP-cratesio-17ea7a565a | pkg:cargo/cyclonedx-core-rust | high | Slopsquatting candidate: cyclonedx-core-rust (crates.io) |
| VDB-SLOP-cratesio-f110681f19 | pkg:cargo/cyclonedx-rust-parser | high | Slopsquatting candidate: cyclonedx-rust-parser (crates.io) |
| VDB-SLOP-cratesio-01d35f9838 | pkg:cargo/async-reqwest | high | Slopsquatting candidate: async-reqwest (crates.io) |
| VDB-SLOP-cratesio-dfc90aa1a4 | pkg:cargo/cyclonedx-xml | high | Slopsquatting candidate: cyclonedx-xml (crates.io) |
| VDB-SLOP-cratesio-0c92c43552 | pkg:cargo/cyclonedx-persistence | high | Slopsquatting candidate: cyclonedx-persistence (crates.io) |
| VDB-SLOP-cratesio-78ab93f35a | pkg:cargo/cyclonedx-merge | high | Slopsquatting candidate: cyclonedx-merge (crates.io) |
| VDB-SLOP-cratesio-8d6ad1e741 | pkg:cargo/cyclonedx_codegen | high | Slopsquatting candidate: cyclonedx_codegen (crates.io) |
| VDB-SLOP-cratesio-0a1ca8c25c | pkg:cargo/cyclonedx-serializers | high | Slopsquatting candidate: cyclonedx-serializers (crates.io) |
| VDB-SLOP-cratesio-d915d6896d | pkg:cargo/cyclonedx-json | high | Slopsquatting candidate: cyclonedx-json (crates.io) |
| VDB-SLOP-cratesio-ec7ccfc998 | pkg:cargo/tokio-request | high | Slopsquatting candidate: tokio-request (crates.io) |
| VDB-SLOP-cratesio-518472e90b | pkg:cargo/cyclonedx-sbom-parser | high | Slopsquatting candidate: cyclonedx-sbom-parser (crates.io) |
| VDB-SLOP-cratesio-e01b63e7ca | pkg:cargo/sbom-parser | high | Slopsquatting candidate: sbom-parser (crates.io) |
| VDB-SLOP-cratesio-da675aed3f | pkg:cargo/cycledx | high | Slopsquatting candidate: cycledx (crates.io) |
| VDB-SLOP-cratesio-213a364e3c | pkg:cargo/sbom-lib | high | Slopsquatting candidate: sbom-lib (crates.io) |
| VDB-SLOP-cratesio-ff301b0f9d | pkg:cargo/cyclonedx-core | high | Slopsquatting candidate: cyclonedx-core (crates.io) |
| VDB-SLOP-cratesio-6aa9c44e45 | pkg:cargo/cyclonedx-serializer | high | Slopsquatting candidate: cyclonedx-serializer (crates.io) |
| VDB-SLOP-cratesio-340eec9fdc | pkg:cargo/sbom-validator | high | Slopsquatting candidate: sbom-validator (crates.io) |
| VDB-SLOP-cratesio-1b9d5a210d | pkg:cargo/cyclonedx-cli | high | Slopsquatting candidate: cyclonedx-cli (crates.io) |
| VDB-SLOP-cratesio-1f7c4d9ee5 | pkg:cargo/cyclonedx-validator | high | Slopsquatting candidate: cyclonedx-validator (crates.io) |
| VDB-SLOP-cratesio-4ca71ceec9 | pkg:cargo/tobiko | high | Slopsquatting candidate: tobiko (crates.io) |
| VDB-SLOP-cratesio-9303b72686 | pkg:cargo/sbom-cyclonedx | high | Slopsquatting candidate: sbom-cyclonedx (crates.io) |
| VDB-SLOP-cratesio-1fd45e57bf | pkg:cargo/cyclonedx-serde | high | Slopsquatting candidate: cyclonedx-serde (crates.io) |
| VDB-SLOP-cratesio-86927d80d9 | pkg:cargo/cyclonedx-rust-lib | high | Slopsquatting candidate: cyclonedx-rust-lib (crates.io) |
| VDB-SLOP-cratesio-277b14c867 | pkg:cargo/rust-sbom | high | Slopsquatting candidate: rust-sbom (crates.io) |
| VDB-SLOP-cratesio-82a922bf5c | pkg:cargo/cyclone-xml-parser | high | Slopsquatting candidate: cyclone-xml-parser (crates.io) |
| VDB-SLOP-cratesio-d01676e9ba | pkg:cargo/cyclonedx-tools | high | Slopsquatting candidate: cyclonedx-tools (crates.io) |
| VDB-SLOP-cratesio-93edd9a0c0 | pkg:cargo/cyclonedx-rust-worker | high | Slopsquatting candidate: cyclonedx-rust-worker (crates.io) |
| VDB-SLOP-cratesio-83e3714e31 | pkg:cargo/cdx-rs | high | Slopsquatting candidate: cdx-rs (crates.io) |
| VDB-SLOP-cratesio-32fefe1596 | pkg:cargo/cyclone-sbom | high | Slopsquatting candidate: cyclone-sbom (crates.io) |
| VDB-SLOP-cratesio-5988d35a8d | pkg:cargo/cyclonedx-translate | high | Slopsquatting candidate: cyclonedx-translate (crates.io) |
| VDB-SLOP-cratesio-f56bb810b0 | pkg:cargo/cyclonedx-parse | high | Slopsquatting candidate: cyclonedx-parse (crates.io) |
| VDB-SLOP-cratesio-838c004207 | pkg:cargo/cyclone_dx | high | Slopsquatting candidate: cyclone_dx (crates.io) |
| VDB-SLOP-cratesio-ac6e9b6a2d | pkg:cargo/cyclonedx-parser | high | Slopsquatting candidate: cyclonedx-parser (crates.io) |
| VDB-SLOP-cratesio-8e77acd10c | pkg:cargo/tokio_reqwest | high | Slopsquatting candidate: tokio_reqwest (crates.io) |
| VDB-SLOP-cratesio-4f0fdd3abf | pkg:cargo/json-cyclonedx | high | Slopsquatting candidate: json-cyclonedx (crates.io) |
| VDB-SLOP-cratesio-915e3c2299 | pkg:cargo/bom-rs | high | Slopsquatting candidate: bom-rs (crates.io) |
| VDB-SLOP-cratesio-cfc2482ca1 | pkg:cargo/akka-rust | high | Slopsquatting candidate: akka-rust (crates.io) |
| VDB-SLOP-cratesio-50ecf42b1d | pkg:cargo/cyclonedx-xml-rust | high | Slopsquatting candidate: cyclonedx-xml-rust (crates.io) |
| VDB-SLOP-cratesio-a308343718 | pkg:cargo/cyclonedx-beeld | high | Slopsquatting candidate: cyclonedx-beeld (crates.io) |
| VDB-SLOP-cratesio-2ec867942c | pkg:cargo/cyclonedx-rc | high | Slopsquatting candidate: cyclonedx-rc (crates.io) |
| VDB-SLOP-cratesio-74c5ed0e7b | pkg:cargo/sbom-impl | high | Slopsquatting candidate: sbom-impl (crates.io) |
| VDB-SLOP-cratesio-72ada79f1f | pkg:cargo/cyclonedx-io | high | Slopsquatting candidate: cyclonedx-io (crates.io) |
| VDB-SLOP-cratesio-afd0d2918a | pkg:cargo/cyclone-dx-parser | high | Slopsquatting candidate: cyclone-dx-parser (crates.io) |
| VDB-SLOP-cratesio-4f4cd8975f | pkg:cargo/cyclonedx-attribute | high | Slopsquatting candidate: cyclonedx-attribute (crates.io) |
| VDB-SLOP-cratesio-0cee19749e | pkg:cargo/sbom-rust | high | Slopsquatting candidate: sbom-rust (crates.io) |
| VDB-SLOP-cratesio-65bea93a5c | pkg:cargo/bom_parser | high | Slopsquatting candidate: bom_parser (crates.io) |
| VDB-SLOP-cratesio-e1c1a13737 | pkg:cargo/cyclonedx-utils | high | Slopsquatting candidate: cyclonedx-utils (crates.io) |
| VDB-SLOP-cratesio-42239e8a33 | pkg:cargo/tokio-reqwest | high | Slopsquatting candidate: tokio-reqwest (crates.io) |
| VDB-SLOP-cratesio-505ecb4183 | pkg:cargo/cyclonedx-rust-cargo | high | Slopsquatting candidate: cyclonedx-rust-cargo (crates.io) |
| VDB-SLOP-cratesio-09f74bd8bc | pkg:cargo/cyclonedx-sbom-rs | high | Slopsquatting candidate: cyclonedx-sbom-rs (crates.io) |
| VDB-SLOP-cratesio-61e443d04e | pkg:cargo/cyclonedx | high | Slopsquatting candidate: cyclonedx (crates.io) |
| VDB-SLOP-cratesio-4e5e231770 | pkg:cargo/cyclonedx-rs | high | Slopsquatting candidate: cyclonedx-rs (crates.io) |
| VDB-SLOP-cratesio-dbea7614b6 | pkg:cargo/aiohttp | high | Slopsquatting candidate: aiohttp (crates.io) |
| VDB-SLOP-cratesio-e80a52d88a | pkg:cargo/turnkey-cyclonedx | high | Slopsquatting candidate: turnkey-cyclonedx (crates.io) |
| VDB-SLOP-cratesio-308141f532 | pkg:cargo/cyclonedx-serialize | high | Slopsquatting candidate: cyclonedx-serialize (crates.io) |
| VDB-SLOP-cratesio-3e67ea97b3 | pkg:cargo/sbom-parse | high | Slopsquatting candidate: sbom-parse (crates.io) |
| VDB-SLOP-cratesio-2b6ca72260 | pkg:cargo/cyclonedx-vulnerability | high | Slopsquatting candidate: cyclonedx-vulnerability (crates.io) |
| VDB-SLOP-cratesio-d1316e7bec | pkg:cargo/serde_ | high | Slopsquatting candidate: serde_ (crates.io) |
| VDB-SLOP-cratesio-0f87e42d6c | pkg:cargo/cyclonedx-lib | high | Slopsquatting candidate: cyclonedx-lib (crates.io) |
| VDB-SLOP-cratesio-7d90f29ca2 | pkg:cargo/tokio_REQwest | high | Slopsquatting candidate: tokio_REQwest (crates.io) |
| VDB-SLOP-cratesio-5bcb00afa7 | pkg:cargo/cyclonedx-cargo | high | Slopsquatting candidate: cyclonedx-cargo (crates.io) |
| VDB-SLOP-cratesio-73a7fdd357 | pkg:cargo/cyclonedx-schema | high | Slopsquatting candidate: cyclonedx-schema (crates.io) |
| VDB-SLOP-cratesio-9753b0b3b8 | pkg:cargo/quick_ | high | Slopsquatting candidate: quick_ (crates.io) |
| VDB-SLOP-cratesio-ea8c4bf1b7 | pkg:cargo/cyclone-dx | high | Slopsquatting candidate: cyclone-dx (crates.io) |
| VDB-SLOP-cratesio-f39e8af0f6 | pkg:cargo/cyclonedx-derive | high | Slopsquatting candidate: cyclonedx-derive (crates.io) |
| VDB-SLOP-cratesio-fed3d0aa53 | pkg:cargo/cyclonedx-sbom | high | Slopsquatting candidate: cyclonedx-sbom (crates.io) |
| VDB-SLOP-cratesio-484144faea | pkg:cargo/cyclonedx-validate | high | Slopsquatting candidate: cyclonedx-validate (crates.io) |
| VDB-SLOP-cratesio-088e054f94 | pkg:cargo/serde-xml- | high | Slopsquatting candidate: serde-xml- (crates.io) |
| VDB-SLOP-cratesio-f04662ac3a | pkg:cargo/cy-cli | high | Slopsquatting candidate: cy-cli (crates.io) |
| VDB-SLOP-cratesio-7a59b23acd | pkg:cargo/cyclonedx-logger | high | Slopsquatting candidate: cyclonedx-logger (crates.io) |
| VDB-SLOP-cratesio-01ef788fb6 | pkg:cargo/cyclone_sdk | high | Slopsquatting candidate: cyclone_sdk (crates.io) |
| VDB-SLOP-cratesio-90c3ac925a | pkg:cargo/cyclonedx-raml | high | Slopsquatting candidate: cyclonedx-raml (crates.io) |
| VDB-SLOP-cratesio-8670783b14 | pkg:cargo/httplib | high | Slopsquatting candidate: httplib (crates.io) |
| VDB-SLOP-cratesio-a0e211e2fe | pkg:cargo/cyclonedx-toml | high | Slopsquatting candidate: cyclonedx-toml (crates.io) |
| VDB-SLOP-cratesio-62e32f1c3f | pkg:cargo/cyclonedx_generator | high | Slopsquatting candidate: cyclonedx_generator (crates.io) |
| VDB-SLOP-cratesio-22d2612ed2 | pkg:cargo/cyclonedx-gen | high | Slopsquatting candidate: cyclonedx-gen (crates.io) |
| VDB-SLOP-cratesio-dd610f21dc | pkg:cargo/sbom-rs | high | Slopsquatting candidate: sbom-rs (crates.io) |
| VDB-SLOP-cratesio-db6cc31ccb | pkg:cargo/quick- | high | Slopsquatting candidate: quick- (crates.io) |
| VDB-SLOP-cratesio-c0c1b891fd | pkg:cargo/aiohttp-rs | high | Slopsquatting candidate: aiohttp-rs (crates.io) |
| VDB-SLOP-cratesio-3cf4a09823 | pkg:cargo/rust-cyclonedx | high | Slopsquatting candidate: rust-cyclonedx (crates.io) |
| VDB-SLOP-cratesio-c344ac1142 | pkg:cargo/cyclone-dx-rs | high | Slopsquatting candidate: cyclone-dx-rs (crates.io) |
| VDB-SLOP-cratesio-fc365fe40f | pkg:cargo/cycl | high | Slopsquatting candidate: cycl (crates.io) |