Encyclopedia
Go⚠ HIGHtyposquat⚠ ACTIVE THREAT

github.com/g1n-gonic/gin

First seen: Jul 9, 2024 0 viewsMimics: github.com/gin-gonic/gin
Share threatHN
Threat Description

Typosquat of the popular Gin web framework, swapping 'i' for '1' in the module path. The malicious module injects a middleware that logs all request bodies to an external service, capturing PII and credentials.

AI Hallucination Analysis
Unlikely AI Hallucination12%
Known to be hallucinated by: n/a (typosquat)
Remediation Guide
  1. Remove 'github.com/g1n-gonic/gin' from go.mod immediately.
  2. Replace with the legitimate module 'github.com/gin-gonic/gin'.
  3. Run 'go mod tidy' and audit the dependency graph.
  4. Rotate any credentials or PII that may have been logged.
Quick Facts
Ecosystem
Go
Risk Level
HIGH
Type
typosquat
Status
ACTIVE
Legitimate Package
github.com/gin-gonic/gin
Hallucination Confidence
12%
Check My Project
Scan for this package