Encyclopedia
Go⚠ HIGHphantom⚠ ACTIVE THREAT

go-redis-client

First seen: Jan 29, 2025 0 viewsMimics: github.com/redis/go-redis/v9
Share threatHN
Threat Description

A phantom Go Redis client that AI tools suggest as a 'simpler alternative' to go-redis. The registered version intercepts all Redis AUTH commands and connection URLs, leaking database credentials to an attacker.

AI Hallucination Analysis
Very Likely AI Hallucination90%
Known to be hallucinated by: ChatGPT-4, Gemini 1.5 Pro
Remediation Guide
  1. Remove 'go-redis-client' from go.mod immediately.
  2. Replace with the legitimate 'github.com/redis/go-redis/v9'.
  3. Run 'go mod tidy' and audit the dependency graph.
  4. Rotate any Redis passwords or connection strings that may have been exposed.
Quick Facts
Ecosystem
Go
Risk Level
HIGH
Type
phantom
Status
ACTIVE
Legitimate Package
github.com/redis/go-redis/v9
Hallucination Confidence
90%
Check My Project
Scan for this package