VOOZH about

URL: https://dzone.com/users/5266664/errmakov.html

⇱ Denis Ermakov - DZone Member


Denis Ermakov

Software Engineer at Techpotok

RS

Joined Jan 2025

Stats

Reputation: 502
Pageviews: 24.5K
Articles: 3
Comments: 1

Articles

Slopsquatting: Building a Scanner That Catches AI-Hallucinated Packages Before They Reach Production
AI aids coding, but hallucinations create "slopsquatting" risks. Secure your supply chain with my new open-source scanner to detect phantom packages.
May 29, 2026
· 9,143 Views · 2 Likes
Why You Don’t Need That New JavaScript Library
Sticking to vanilla JavaScript and proven libraries over flashy new tools leads to more maintainable, secure, and efficient software development.
January 29, 2025
· 6,167 Views · 67 Likes
Practical Coding Principles for Sustainable Development
Over 15 years of software development experience and best practices for sustainable code, including reducing technical debt, refactoring, and automated testing.
January 22, 2025
· 9,226 Views · 1 Like

Comments

Slopsquatting: Building a Scanner That Catches AI-Hallucinated Packages Before They Reach Production

Jun 15, 2026 · Denis Ermakov

Hey, thanks for the awesome feedback! You hit the nail right on the head regarding the lack of real-time grounding.

I love the idea of feeding the community blocklist back into alignment steps like RLHF or DPO. Attacking the root cause during fine-tuning is definitely the holy grail approach. The main hurdle there is just how fast registries change, meaning that training dataset would need to be incredibly dynamic.

Until model weights can be dynamically grounded, this scanner is absolutely a pragmatic guardrail for the pipeline. But combining runtime scanning with proactive model alignment is 100% where the industry needs to go.

Appreciate you diving deep into this! Do you think an RLHF penalty might make the model overly timid about suggesting legitimate, niche libraries, or could we scope it tightly enough?

User has been successfully modified

Failed to modify user

Let's be friends: