Enji GuardSupply chain
Hallucinated package
A hallucinated package is a dependency name suggested by an AI tool even though the package does not exist, is not the intended package, or cannot be trusted.
What it means
A hallucinated package is a package name produced by an AI system that sounds plausible but is not a real or intended dependency. The danger increases when a developer or agent installs it without verification.
Why it matters for AI-written code
AI-generated snippets often include install commands or imports. If the suggested package is wrong, the project can inherit broken builds, abandoned code, or a supply-chain attack path.
Guard and Fleet context
Guard connects hallucinated packages to dependency hygiene and recurring audits. Fleet context helps spot repeated risky suggestions across repositories.
How Enji Guard helps
Guard checks dependency changes, surfaces suspicious package choices, and turns the risk into reviewable work before the package becomes an invisible part of the project.