build1 distinct publisher
Existence checks are dead: attackers now register the packages your AI invents
A single-author npm tool measured what supply-chain guards actually verify, and found documented hallucinated names alive on the registry. Provenance beats resolution.
Publishers:dev.to
Reality
- Evidence42
- Adoption12
- Hype gap+18
- Incentives76
- Confidence46