If ChatGPT is fabricating code libraries or packages, attackers could use these hallucinations to spread malicious packages without using suspicious and already detectable techniques like typosquatting or masquerading.
Users who already have TikTok installed are exempt from the new law, a major reason security pros believe it will be impossible to enforce, since users can download the app over the next several months before the law goes into effect, download it in another state once the law goes live, or use a VPN.