Hallucinated packages
-
AI-generated code Checking and trusting it
ENISA's Draft Advisory Says AI-Generated Statements Such as "All Checks Passed" Should in General Not Be Accepted Unless They Are Linked to Supporting Evidence
In a draft technical advisory on AI-assisted software development, dated September 2026, the EU Agency for Cybersecurity says that "functional correctness should not be confused with security," and lists among the risks it sees AI-generated claims that the work is secure or fixed, accepted "without supporting evidence."
-
AI-generated code What goes wrong in it
Researchers Find That Code-Generating Models Recommend Software Packages That Do Not Exist
In a paper in the proceedings of the USENIX Security Symposium of August 2025, researchers report that code-generating models recommend packages that do not exist, and that an invented name often comes back when the same prompt is asked again.
