Security guardrail that inspects autonomous AI coding agent tool invocations, blocking hallucinated or typosquatted npm/PyPI dependencies.
Autonomous AI coding agents (Claude Code, Cursor, Copilot, SWE-bench bots) frequently invent imaginary packages or make typos when calling shell tools:
- The AI runs
npm install express-cors-fixorpip install reqeusts. - Attackers register these known hallucination patterns on public registries with malicious payloads that exfiltrate
.envsecrets, AWS credentials, and crypto private keys. - Slopsquatting has become the fastest-growing supply chain attack vector against AI developers.
ai-hallucination-wall acts as an active firewall:
- Intercepts CLI installation invocations before execution.
- Compares against vetted registry databases and calculates Levenshtein distance against high-profile targets.
- Blocks slopsquats, typo-squats, and hallucinated suffix packages instantly.
pip install ai-hallucination-wall# Intercept an agent command before running it
ai-hallucination-wall check-command --cmd "npm install expres"
# Scan manifest files in PRs
ai-hallucination-wall scan-manifest --file requirements.txt
# Inspect a package name directly
ai-hallucination-wall check-package --name "requests-official"
# Check license & zero-fee wallet payment details
ai-hallucination-wall license- name: AI Hallucination Wall
uses: OrderStream/ai-hallucination-wall@v1
with:
manifest: "requirements.txt"| Tier | Price | Repositories | Core Capabilities |
|---|---|---|---|
| Community Free | **** | Unlimited | Standalone CLI runner and single-repo GitHub Action |
| Starter Suite | ** / mo** | Up to 10 Repos | Automated CI PR gates, 500 CI runs/mo, standard email support |
| Team Platform | ,499 / mo | Up to 50 Repos | Full 10-tool OrderStream suite, flaky test quarantine deterministic replay, zero-downtime shadow DB migration guard, 24/7 telemetry alarms |
| Enterprise Platform | ,999 / mo | Unlimited | Multi-repo speculative merge engine, zero-downtime migration orchestrator, WASM sandbox gate, dedicated 24/7 cloud keeper, custom SLA |
| M&A IP & Security Audit | ,000 one-time | Whole Organization | Comprehensive copyleft AST fuzzy fingerprint audit, snippet license sheriff certification, formal invariant verification, and executive forensic IP Cleanliness Certificate |
Support this project or purchase enterprise zero-day threat intelligence with 0 platform fees:
- Polar Subscription & Sponsorship: https://polar.sh/orderstream
- Stellar Network (Native XLM / USDC):
- Public Key:
GABFQIK63R2NETJM7T673EAMZN4RJLLGP3OFUEJU5ZVTGWUKULZJNL6 - Memo (Required):
400566831
- Public Key:
- EVM (Base / Arbitrum / Ethereum USDT & USDC):
- Address:
0x5de2b62434754bfd39ef350a3a867ed3eced5074
- Address: