Encyclopedia
RubyGems◆ MEDIUMslopsquat⚠ ACTIVE THREAT

ruby-json-parser-fast

First seen: Nov 30, 2024 135 viewsMimics: json
Share threatHN
Threat Description

Hallucinated fast JSON parser for Ruby. Replaces the native JSON gem's parse method with a patched version that logs all parsed JSON containing password or token keys.

AI Hallucination Analysis
Very Likely AI Hallucination85%
Known to be hallucinated by: Claude 3 Haiku
Remediation Guide
  1. Remove "ruby-json-parser-fast" from your dependencies immediately.
  2. Replace with the legitimate package "json" if applicable.
  3. Audit your codebase for any imports or usage of the malicious package.
  4. Check your CI/CD logs for when this package was introduced.
  5. Rotate any exposed secrets (API keys, tokens) that may have been exfiltrated.
Quick Facts
Ecosystem
RubyGems
Risk Level
MEDIUM
Type
slopsquat
Status
ACTIVE
Legitimate Package
json
Hallucination Confidence
85%
Check My Project
Scan for this package