These nonexistent dependencies represent a threat to the software supply chain by exacerbating so-called dependency confusion ... the phenomenon “package hallucination.” For the study, the researchers ...

These non-existent dependencies represent a threat to the software supply chain by exacerbating so-called dependency confusion ... rate for JavaScript packages compared to Python is also difficult ...