Encyclopedia
npm⚠ HIGHphantom⚠ ACTIVE THREAT

ideal-octo-goggles

First seen: Mar 4, 2025 0 views
Share threatHN
Threat Description

A documented AI-hallucinated package name of the auto-generated 'adjective-noun-noun' style that LLMs produce for placeholder examples. The registered package contains a cryptominer that targets CI runners, spiking build costs and competing for resources.

AI Hallucination Analysis
Very Likely AI Hallucination93%
Known to be hallucinated by: ChatGPT-4, GitHub Copilot
Remediation Guide
  1. Remove 'ideal-octo-goggles' from your dependencies immediately.
  2. There is no legitimate package — remove the import entirely.
  3. Audit CI/CD runners for cryptomining artifacts.
  4. Rotate any exposed secrets.
Quick Facts
Ecosystem
npm
Risk Level
HIGH
Type
phantom
Status
ACTIVE
Hallucination Confidence
93%
Check My Project
Scan for this package