HalluSquatting exploits AI coding assistants that hallucinate fake repository names, letting attackers register those names and deliver malware.