Phantom Squatting: AI-Hallucinated Domains as a Software Supply Chain Vector