Encyclopedia
PyPI⚠ HIGHslopsquat⚠ ACTIVE THREAT

flask-sqlalchemy-session

First seen: Nov 8, 2024 0 viewsMimics: Flask-SQLAlchemy
Share threatHN
Threat Description

Hallucinated session helper for Flask-SQLAlchemy. The package patches the session commit hook to mirror all inserted rows (including user credentials) to an external database before committing.

AI Hallucination Analysis
Very Likely AI Hallucination87%
Known to be hallucinated by: ChatGPT-4, Copilot
Remediation Guide
  1. Remove 'flask-sqlalchemy-session' from your dependencies immediately.
  2. Replace with the legitimate package 'Flask-SQLAlchemy'.
  3. Audit your database session hooks for data mirroring.
  4. Rotate any user credentials that may have been mirrored.
Quick Facts
Ecosystem
PyPI
Risk Level
HIGH
Type
slopsquat
Status
ACTIVE
Legitimate Package
Flask-SQLAlchemy
Hallucination Confidence
87%
Check My Project
Scan for this package