AI hallucinates software packages and devs download them – even if potentially poisoned with malware

[outer pelican]

https://www.theregister.com/2024/03/28/ai_bots_hallucinate_software_packages/

[lofty horizon]

why

[serene atlas]

what do you mean ?

[lofty horizon]

ai bots hallucinate packages

[serene atlas]

Natural monkey asks articial monkey for advice and actually follows it

[lofty horizon]

why does dev downloas them

[serene atlas]

AI Bots hallucinate in general

The idea here being that someone nefarious could ask models for code advice, make a note of imagined packages AI systems repeatedly recommend, and then implement those dependencies so that other programmers, when using the same models and getting the same suggestions, end up pulling in those libraries, which may be poisoned with malware.
thanks for the advice theregister!

[serene atlas]

https://tenor.com/bTFH6tz9f4E.gif

literally this

[leaden oyster]

JS devs would rather import an 11-line left-pad library than write it themselves

[lofty horizon]

ofc it will the js dev... why i'm not surprised

[serene atlas]

if anyone would like to collaborate, im down

lets do some evil shit

😈

[lofty horizon]

i'll end you

[serene atlas]

ofcourse, i must get my beauty sleep at 12:15:33 AM

[leaden oyster]

Other langs have that bad too; Rust has a similar issue, though nowhere near as severe as JS

[lofty horizon]

no u must focus my brother

[serene atlas]

OTOH average C dev wanting to reinvent the wheel everytime and introducing bugs that way

[lofty horizon]

they rewrite C -> rust as a living [drama, mess]

all day

[leaden oyster]

true, there's a balance
tho that's why you keep the wheels you re-invent after your code project 😛

[frigid cipher]

js are the worst devs

they don't even know why their code works