AI assistants confidently suggest packages that don't exist. Attackers register those names with malware (slopsquatting). Paste a name before you install it.