Researchers show HalluSquatting can make AI coding agents fetch fake repositories or skills and run attacker-supplied code.
A 15-year-old boy asked a chatbot for help – and cancelled nearly 47,000 anime streaming subscriptions in under four hours.