Encyclopedia
npm☠ CRITICALslopsquat⚠ ACTIVE THREAT

crypt0-utils

First seen: Nov 15, 2024 849 viewsMimics: crypto-utils
Share threatHN
Threat Description

A malicious package hallucinated by ChatGPT and Claude when asked for 'a lightweight crypto utility for Node.js'. The package exfiltrates environment variables including API keys and secrets to a remote C2 server on install.

AI Hallucination Analysis
Very Likely AI Hallucination85%
Known to be hallucinated by: ChatGPT-4, Claude 3 Sonnet, Gemini Pro
Remediation Guide
  1. Remove "crypt0-utils" from your dependencies immediately.
  2. Replace with the legitimate package "crypto-utils" if applicable.
  3. Audit your codebase for any imports or usage of the malicious package.
  4. Check your CI/CD logs for when this package was introduced.
  5. Rotate any exposed secrets (API keys, tokens) that may have been exfiltrated.
Quick Facts
Ecosystem
npm
Risk Level
CRITICAL
Type
slopsquat
Status
ACTIVE
Legitimate Package
crypto-utils
Hallucination Confidence
85%
Check My Project
Scan for this package