Ask a language model which package to use and, now and then, it names one that does not exist. If someone registers that name first, the next developer — or the next coding agent — who follows the same suggestion installs whatever they put there. That is slopsquatting. We collect those names and score each one. A name that returns 404 is easy: it is a target. The hard case is a name that does resolve. Is it the project the model meant, or someone who registered the name after models started...