Slopsquatting candidates — names attackers will target next
Package names multiple LLMs repeatedly hallucinate are exact targeting information for attackers — "register this and someone will install it". We see those names before attackers do.
How we detect
We regularly run a matrix of hundreds of programming prompts through major LLMs (Claude, GPT, Gemini, Llama) and harvest the package names they recommend. Cross-model agreement raises the target score. The registry status is checked live against npm/PyPI/crates.io for (1) non-existence, (2) recent registration with suspicious patterns, and (3) empty wrappers around famous names.
Bulk package check
Paste package names suggested by an LLM, one per line. Flagged candidates appear below.
| id | purl | risk | summary |
|---|---|---|---|
| VDB-SLOP-cratesio-17ea7a565a | pkg:cargo/cyclonedx-core-rust | high | Slopsquatting candidate: cyclonedx-core-rust (crates.io) |
| VDB-SLOP-cratesio-78ab93f35a | pkg:cargo/cyclonedx-merge | high | Slopsquatting candidate: cyclonedx-merge (crates.io) |
| VDB-SLOP-cratesio-0a9706cca7 | pkg:cargo/serde_xml_ | high | Slopsquatting candidate: serde_xml_ (crates.io) |
| VDB-SLOP-cratesio-063fcceaa3 | pkg:cargo/sbom-sdk | high | Slopsquatting candidate: sbom-sdk (crates.io) |
| VDB-SLOP-cratesio-1282d44872 | pkg:cargo/cyclonedx-commons | high | Slopsquatting candidate: cyclonedx-commons (crates.io) |
| VDB-SLOP-cratesio-e874cd8d09 | pkg:cargo/asilent | high | Slopsquatting candidate: asilent (crates.io) |
| VDB-SLOP-cratesio-3b241faec2 | pkg:cargo/cdxgen | high | Slopsquatting candidate: cdxgen (crates.io) |
| VDB-SLOP-cratesio-0c92c43552 | pkg:cargo/cyclonedx-persistence | high | Slopsquatting candidate: cyclonedx-persistence (crates.io) |
| VDB-SLOP-cratesio-42239e8a33 | pkg:cargo/tokio-reqwest | high | Slopsquatting candidate: tokio-reqwest (crates.io) |
| VDB-SLOP-cratesio-b30149a99c | pkg:cargo/cyclone-rs | high | Slopsquatting candidate: cyclone-rs (crates.io) |
| VDB-SLOP-cratesio-73a7fdd357 | pkg:cargo/cyclonedx-schema | high | Slopsquatting candidate: cyclonedx-schema (crates.io) |
| VDB-SLOP-cratesio-d1316e7bec | pkg:cargo/serde_ | high | Slopsquatting candidate: serde_ (crates.io) |
| VDB-SLOP-cratesio-8d6ad1e741 | pkg:cargo/cyclonedx_codegen | high | Slopsquatting candidate: cyclonedx_codegen (crates.io) |
| VDB-SLOP-cratesio-ec7ccfc998 | pkg:cargo/tokio-request | high | Slopsquatting candidate: tokio-request (crates.io) |
| VDB-SLOP-cratesio-ba45071386 | pkg:cargo/akri | high | Slopsquatting candidate: akri (crates.io) |
| VDB-SLOP-cratesio-4e5e231770 | pkg:cargo/cyclonedx-rs | high | Slopsquatting candidate: cyclonedx-rs (crates.io) |
| VDB-SLOP-cratesio-d915d6896d | pkg:cargo/cyclonedx-json | high | Slopsquatting candidate: cyclonedx-json (crates.io) |
| VDB-SLOP-cratesio-3cf4a09823 | pkg:cargo/rust-cyclonedx | high | Slopsquatting candidate: rust-cyclonedx (crates.io) |
| VDB-SLOP-cratesio-9cd9b95153 | pkg:cargo/sbomparser | high | Slopsquatting candidate: sbomparser (crates.io) |
| VDB-SLOP-cratesio-fed3d0aa53 | pkg:cargo/cyclonedx-sbom | high | Slopsquatting candidate: cyclonedx-sbom (crates.io) |
| VDB-SLOP-cratesio-3fc0c9f7c2 | pkg:cargo/sbd-json | high | Slopsquatting candidate: sbd-json (crates.io) |
| VDB-SLOP-cratesio-da675aed3f | pkg:cargo/cycledx | high | Slopsquatting candidate: cycledx (crates.io) |
| VDB-SLOP-cratesio-1e8c41742d | pkg:cargo/cyclone-tds | high | Slopsquatting candidate: cyclone-tds (crates.io) |
| VDB-SLOP-cratesio-e1c1a13737 | pkg:cargo/cyclonedx-utils | high | Slopsquatting candidate: cyclonedx-utils (crates.io) |
| VDB-SLOP-cratesio-61a885e166 | pkg:cargo/bom_rs | high | Slopsquatting candidate: bom_rs (crates.io) |
| VDB-SLOP-cratesio-213a364e3c | pkg:cargo/sbom-lib | high | Slopsquatting candidate: sbom-lib (crates.io) |
| VDB-SLOP-cratesio-83e3714e31 | pkg:cargo/cdx-rs | high | Slopsquatting candidate: cdx-rs (crates.io) |
| VDB-SLOP-cratesio-340eec9fdc | pkg:cargo/sbom-validator | high | Slopsquatting candidate: sbom-validator (crates.io) |
| VDB-SLOP-cratesio-656c44b2c8 | pkg:cargo/cyclone_dxd | high | Slopsquatting candidate: cyclone_dxd (crates.io) |
| VDB-SLOP-cratesio-392ef38848 | pkg:cargo/cyclone-rust | high | Slopsquatting candidate: cyclone-rust (crates.io) |
| VDB-SLOP-cratesio-004ce28257 | pkg:cargo/otoño | high | Slopsquatting candidate: otoño (crates.io) |
| VDB-SLOP-cratesio-4ca71ceec9 | pkg:cargo/tobiko | high | Slopsquatting candidate: tobiko (crates.io) |
| VDB-SLOP-cratesio-6d17bf9e3e | pkg:cargo/cyclonedx-rs-gen | high | Slopsquatting candidate: cyclonedx-rs-gen (crates.io) |
| VDB-SLOP-cratesio-64ffaa15e1 | pkg:cargo/cycloneDX-rs | high | Slopsquatting candidate: cycloneDX-rs (crates.io) |
| VDB-SLOP-cratesio-61e443d04e | pkg:cargo/cyclonedx | high | Slopsquatting candidate: cyclonedx (crates.io) |
| VDB-SLOP-cratesio-1fd45e57bf | pkg:cargo/cyclonedx-serde | high | Slopsquatting candidate: cyclonedx-serde (crates.io) |
| VDB-SLOP-cratesio-ff301b0f9d | pkg:cargo/cyclonedx-core | high | Slopsquatting candidate: cyclonedx-core (crates.io) |
| VDB-SLOP-cratesio-100751dcaa | pkg:cargo/acto-http | high | Slopsquatting candidate: acto-http (crates.io) |
| VDB-SLOP-cratesio-7a59b23acd | pkg:cargo/cyclonedx-logger | high | Slopsquatting candidate: cyclonedx-logger (crates.io) |
| VDB-SLOP-cratesio-277b14c867 | pkg:cargo/rust-sbom | high | Slopsquatting candidate: rust-sbom (crates.io) |
| VDB-SLOP-cratesio-82a922bf5c | pkg:cargo/cyclone-xml-parser | high | Slopsquatting candidate: cyclone-xml-parser (crates.io) |
| VDB-SLOP-cratesio-6892581a36 | pkg:cargo/serde- | high | Slopsquatting candidate: serde- (crates.io) |
| VDB-SLOP-cratesio-c09505eb12 | pkg:cargo/cyclonedx-generator | high | Slopsquatting candidate: cyclonedx-generator (crates.io) |
| VDB-SLOP-cratesio-93edd9a0c0 | pkg:cargo/cyclonedx-rust-worker | high | Slopsquatting candidate: cyclonedx-rust-worker (crates.io) |
| VDB-SLOP-cratesio-f110681f19 | pkg:cargo/cyclonedx-rust-parser | high | Slopsquatting candidate: cyclonedx-rust-parser (crates.io) |
| VDB-SLOP-cratesio-d01676e9ba | pkg:cargo/cyclonedx-tools | high | Slopsquatting candidate: cyclonedx-tools (crates.io) |
| VDB-SLOP-cratesio-c344ac1142 | pkg:cargo/cyclone-dx-rs | high | Slopsquatting candidate: cyclone-dx-rs (crates.io) |
| VDB-SLOP-cratesio-1f7c4d9ee5 | pkg:cargo/cyclonedx-validator | high | Slopsquatting candidate: cyclonedx-validator (crates.io) |
| VDB-SLOP-cratesio-0964551292 | pkg:cargo/cyclonedx-types | high | Slopsquatting candidate: cyclonedx-types (crates.io) |
| VDB-SLOP-cratesio-5988d35a8d | pkg:cargo/cyclonedx-translate | high | Slopsquatting candidate: cyclonedx-translate (crates.io) |
| VDB-SLOP-cratesio-36db9264b2 | pkg:cargo/cyclonedx-structs | high | Slopsquatting candidate: cyclonedx-structs (crates.io) |
| VDB-SLOP-cratesio-0a1ca8c25c | pkg:cargo/cyclonedx-serializers | high | Slopsquatting candidate: cyclonedx-serializers (crates.io) |
| VDB-SLOP-cratesio-79b0446fcc | pkg:cargo/cyclonedx-core-rs | high | Slopsquatting candidate: cyclonedx-core-rs (crates.io) |
| VDB-SLOP-cratesio-b9eea73125 | pkg:cargo/cyclonedx-yaml | high | Slopsquatting candidate: cyclonedx-yaml (crates.io) |
| VDB-SLOP-cratesio-fb843d3021 | pkg:cargo/bom-parse | high | Slopsquatting candidate: bom-parse (crates.io) |
| VDB-SLOP-cratesio-4f0fdd3abf | pkg:cargo/json-cyclonedx | high | Slopsquatting candidate: json-cyclonedx (crates.io) |
| VDB-SLOP-cratesio-3a12d6db2b | pkg:cargo/cyclonedx-bindgen | high | Slopsquatting candidate: cyclonedx-bindgen (crates.io) |
| VDB-SLOP-cratesio-518472e90b | pkg:cargo/cyclonedx-sbom-parser | high | Slopsquatting candidate: cyclonedx-sbom-parser (crates.io) |
| VDB-SLOP-cratesio-01d35f9838 | pkg:cargo/async-reqwest | high | Slopsquatting candidate: async-reqwest (crates.io) |
| VDB-SLOP-cratesio-0daeef7f7b | pkg:cargo/cyclonedx2 | high | Slopsquatting candidate: cyclonedx2 (crates.io) |
| VDB-SLOP-cratesio-27f65e57ed | pkg:cargo/async-haste | high | Slopsquatting candidate: async-haste (crates.io) |
| VDB-SLOP-cratesio-a74ea2d950 | pkg:cargo/cyclonedx-oxide | high | Slopsquatting candidate: cyclonedx-oxide (crates.io) |
| VDB-SLOP-cratesio-056370ce65 | pkg:cargo/sbomparse | high | Slopsquatting candidate: sbomparse (crates.io) |
| VDB-SLOP-cratesio-ac6e9b6a2d | pkg:cargo/cyclonedx-parser | high | Slopsquatting candidate: cyclonedx-parser (crates.io) |
| VDB-SLOP-cratesio-f3b85722b3 | pkg:cargo/axios-rs | high | Slopsquatting candidate: axios-rs (crates.io) |
| VDB-SLOP-cratesio-915e3c2299 | pkg:cargo/bom-rs | high | Slopsquatting candidate: bom-rs (crates.io) |
| VDB-SLOP-cratesio-cfc2482ca1 | pkg:cargo/akka-rust | high | Slopsquatting candidate: akka-rust (crates.io) |
| VDB-SLOP-cratesio-50ecf42b1d | pkg:cargo/cyclonedx-xml-rust | high | Slopsquatting candidate: cyclonedx-xml-rust (crates.io) |
| VDB-SLOP-cratesio-505ecb4183 | pkg:cargo/cyclonedx-rust-cargo | high | Slopsquatting candidate: cyclonedx-rust-cargo (crates.io) |
| VDB-SLOP-cratesio-aef71f13dc | pkg:cargo/cycloneDX-sbom | high | Slopsquatting candidate: cycloneDX-sbom (crates.io) |
| VDB-SLOP-cratesio-f74b11d18a | pkg:cargo/sbom-generator | high | Slopsquatting candidate: sbom-generator (crates.io) |
| VDB-SLOP-cratesio-838c004207 | pkg:cargo/cyclone_dx | high | Slopsquatting candidate: cyclone_dx (crates.io) |
| VDB-SLOP-cratesio-a308343718 | pkg:cargo/cyclonedx-beeld | high | Slopsquatting candidate: cyclonedx-beeld (crates.io) |
| VDB-SLOP-cratesio-dfc90aa1a4 | pkg:cargo/cyclonedx-xml | high | Slopsquatting candidate: cyclonedx-xml (crates.io) |
| VDB-SLOP-cratesio-a627c940b1 | pkg:cargo/cyclonedx-assembly | high | Slopsquatting candidate: cyclonedx-assembly (crates.io) |
| VDB-SLOP-cratesio-6d4701fce7 | pkg:cargo/tokiot | high | Slopsquatting candidate: tokiot (crates.io) |
| VDB-SLOP-cratesio-9753b0b3b8 | pkg:cargo/quick_ | high | Slopsquatting candidate: quick_ (crates.io) |
| VDB-SLOP-cratesio-32fefe1596 | pkg:cargo/cyclone-sbom | high | Slopsquatting candidate: cyclone-sbom (crates.io) |
| VDB-SLOP-cratesio-2ec867942c | pkg:cargo/cyclonedx-rc | high | Slopsquatting candidate: cyclonedx-rc (crates.io) |
| VDB-SLOP-cratesio-cea0b3d0a4 | pkg:cargo/cyclonedx-json-parser | high | Slopsquatting candidate: cyclonedx-json-parser (crates.io) |
| VDB-SLOP-cratesio-afd0d2918a | pkg:cargo/cyclone-dx-parser | high | Slopsquatting candidate: cyclone-dx-parser (crates.io) |
| VDB-SLOP-cratesio-308141f532 | pkg:cargo/cyclonedx-serialize | high | Slopsquatting candidate: cyclonedx-serialize (crates.io) |
| VDB-SLOP-cratesio-74c5ed0e7b | pkg:cargo/sbom-impl | high | Slopsquatting candidate: sbom-impl (crates.io) |
| VDB-SLOP-cratesio-72ada79f1f | pkg:cargo/cyclonedx-io | high | Slopsquatting candidate: cyclonedx-io (crates.io) |
| VDB-SLOP-cratesio-593b3b1f1e | pkg:cargo/cyclonedx-ll | high | Slopsquatting candidate: cyclonedx-ll (crates.io) |
| VDB-SLOP-cratesio-1b9d5a210d | pkg:cargo/cyclonedx-cli | high | Slopsquatting candidate: cyclonedx-cli (crates.io) |
| VDB-SLOP-cratesio-c5800bc391 | pkg:cargo/convertido | high | Slopsquatting candidate: convertido (crates.io) |
| VDB-SLOP-cratesio-ea8c4bf1b7 | pkg:cargo/cyclone-dx | high | Slopsquatting candidate: cyclone-dx (crates.io) |
| VDB-SLOP-cratesio-ee8513dff0 | pkg:cargo/cdx_rs | high | Slopsquatting candidate: cdx_rs (crates.io) |
| VDB-SLOP-cratesio-484144faea | pkg:cargo/cyclonedx-validate | high | Slopsquatting candidate: cyclonedx-validate (crates.io) |
| VDB-SLOP-cratesio-4f4cd8975f | pkg:cargo/cyclonedx-attribute | high | Slopsquatting candidate: cyclonedx-attribute (crates.io) |
| VDB-SLOP-cratesio-65bea93a5c | pkg:cargo/bom_parser | high | Slopsquatting candidate: bom_parser (crates.io) |
| VDB-SLOP-cratesio-09f74bd8bc | pkg:cargo/cyclonedx-sbom-rs | high | Slopsquatting candidate: cyclonedx-sbom-rs (crates.io) |
| VDB-SLOP-cratesio-dbea7614b6 | pkg:cargo/aiohttp | high | Slopsquatting candidate: aiohttp (crates.io) |
| VDB-SLOP-cratesio-e80a52d88a | pkg:cargo/turnkey-cyclonedx | high | Slopsquatting candidate: turnkey-cyclonedx (crates.io) |
| VDB-SLOP-cratesio-79bdda5012 | pkg:cargo/cyclonedx- | high | Slopsquatting candidate: cyclonedx- (crates.io) |
| VDB-SLOP-cratesio-dd610f21dc | pkg:cargo/sbom-rs | high | Slopsquatting candidate: sbom-rs (crates.io) |
| VDB-SLOP-cratesio-aa0a4ac82b | pkg:cargo/cycloneDX | high | Slopsquatting candidate: cycloneDX (crates.io) |
| VDB-SLOP-cratesio-0cd4f3dcee | pkg:cargo/cyclonedx-writer | high | Slopsquatting candidate: cyclonedx-writer (crates.io) |
| VDB-SLOP-cratesio-cbfbcdc172 | pkg:cargo/cyclonedx-model | high | Slopsquatting candidate: cyclonedx-model (crates.io) |