AI models and human hackers have independently converged on the same insight: publishing malware to public package registries is the easiest way into an enterprise. Research shows all frontier models make the same hallucination about certain non-existent packages — a ready-made vector for typosquatting attacks at machine scale.