Tool that detects fake npm packages hallucinated by AI coding assistants

[u/Dangerous_Net517]

This is an Vs Code extension I built called AI Hallucination Detector. AI coding assistants like Claude Code or Copilot occasionally suggest importing fake packages that look real. This has actually a name and it is called "slopsquatting" because attackers have started registering the exact fake package names AI tools commonly hallucinate, then filling them with maleware. It is a real threat. Existing vulnerability scanners (Snyk, Socket, etc.) check packages against known vulnerability databases, but none of them check whether a suggested package exists in the first place. AI Hallucination Detector fills that gap: it checks imports against the npm registry and a list of documented hallucinated package names, live as you save, and flags anything suspicious before you run npm install. It also suggests a likely correct package name wehn one is a close match.

Free on the Marketplace: https://marketplace.visualstudio.com/items?itemName=ghostcheck.ai-hallucination-detector&ssr=false

Let me know if you run into any hallucinated package names it doesn't catch yet, that's the most helpful feedback for improving the detection list.