Encyclopedia
PyPI◆ MEDIUMslopsquat⚠ ACTIVE THREAT

tensorflow-gpu-utils

First seen: Feb 22, 2025 0 viewsMimics: tensorflow
Share threatHN
Threat Description

Hallucinated GPU helper for TensorFlow. The package collects CUDA device info and any TensorFlow model files it can read, exfiltrating proprietary model weights to an external endpoint.

AI Hallucination Analysis
Very Likely AI Hallucination84%
Known to be hallucinated by: ChatGPT-4o, Cursor
Remediation Guide
  1. Remove 'tensorflow-gpu-utils' from your dependencies immediately.
  2. Replace with the legitimate package 'tensorflow'.
  3. Audit your codebase for imports of the malicious package.
  4. Rotate any credentials and review access to proprietary models.
Quick Facts
Ecosystem
PyPI
Risk Level
MEDIUM
Type
slopsquat
Status
ACTIVE
Legitimate Package
tensorflow
Hallucination Confidence
84%
Check My Project
Scan for this package