Open-source projects are facing a new challenge: a flood of low-quality, automated bug reports and security submissions, often referred to as "AI slop." While the intention behind these automated tools may be to improve security, the sheer volume of low-quality reports is overwhelming maintainers and making it difficult to identify genuine vulnerabilities. This raises important questions about the role of automation in open-source security and the need for better tools to filter out the noise.