Nearly 20% of libraries recommended to developers by modern LLMs are fabricated. Attackers have learned to hijack these phantom dependencies and inject malicious code into third-party projects.
