AI bots hallucinate software packages and devs download them

Researchers asked chatbots for coding advice and the bots kept recommending software packages that do not exist. One researcher registered the most-hallucinated name on PyPI and watched over 15,000 developers install it, including inside an Alibaba repo. It was a harmless test this time, but the next dream package could ship with real malware.