HalluSquatting turns 9 AI coding assistants into botnet vector

Affected: Cursor, Gemini CLI, Windsurf, Copilot, Cline, OpenClaw, ZeroClaw, NanoClaw. Mean hallucination 92.4% for 2025 repos vs 0.9% pre-2019.