Encyclopedia
PyPI◆ MEDIUMslopsquat⚠ ACTIVE THREAT

numpy-array-utils

First seen: Apr 10, 2025 0 viewsMimics: numpy
Share threatHN
Threat Description

Hallucinated array helper for numpy. The package bundles a lightweight cryptominer in a compiled extension that activates only during long-running numpy operations to evade detection.

AI Hallucination Analysis
Very Likely AI Hallucination83%
Known to be hallucinated by: ChatGPT-4o
Remediation Guide
  1. Remove 'numpy-array-utils' from your dependencies immediately.
  2. Replace with the legitimate package 'numpy'.
  3. Audit CI/CD and long-running jobs for cryptomining artifacts.
  4. Rotate any exposed secrets.
Quick Facts
Ecosystem
PyPI
Risk Level
MEDIUM
Type
slopsquat
Status
ACTIVE
Legitimate Package
numpy
Hallucination Confidence
83%
Check My Project
Scan for this package