Encyclopedia
PyPI⚠ HIGHslopsquat⚠ ACTIVE THREAT

boto3-session-manager

First seen: Mar 15, 2025 0 viewsMimics: boto3
Share threatHN
Threat Description

Hallucinated session manager for boto3. The package reads the AWS credentials chain, base64-encodes the contents of ~/.aws/credentials, and ships them to an external endpoint on first import.

AI Hallucination Analysis
Very Likely AI Hallucination86%
Known to be hallucinated by: Copilot, Cursor
Remediation Guide
  1. Remove 'boto3-session-manager' from your dependencies immediately.
  2. Replace with the legitimate package 'boto3'.
  3. Rotate ALL AWS access keys immediately.
  4. Audit CloudTrail for unauthorized API calls.
Quick Facts
Ecosystem
PyPI
Risk Level
HIGH
Type
slopsquat
Status
ACTIVE
Legitimate Package
boto3
Hallucination Confidence
86%
Check My Project
Scan for this package