404
AI bots hallucinate software packages and devs download them
(www.theregister.com)
This is a most excellent place for technology news and articles.
we just experienced this with LZMA on debian according to recent reports. 2 years of either manufactured dev history, or one very, very weird episode.