Registration census
1,641AI-invented package names, every one still unregistered
0
malicious registrations (of 22)
6,800
model generations
5
code models
From Hallucination to Registration: Do the Package Names That LLMs Invent Actually Get Claimed?
Five code models invented 1,641 package names that do not exist. Every one is still unregistered, and of the hallucinated names that are registered, none are malicious. The attack mechanism itself is confirmed in a sealed lab.