It is a command line tool "huggingface-cli", it's just installed with a differently-named pypi package. I wouldn't call this a full hallucination because anyone could make this mistake.
If a human user makes this mistake, they’d go to https://pypi.org/project/huggingface-cli/ and see that it a) either doesn’t exist, b) is an unrelated package, or c) that the verified list of its maintainers is unrelated than the maintainers on Hugging Face, Inc.’s GitHub repository.