Encyclopedia
Go⚠ HIGHslopsquat⚠ ACTIVE THREAT

gorm-migrator

First seen: Dec 5, 2024 0 viewsMimics: gorm.io/gorm
Share threatHN
Threat Description

Hallucinated migration helper for GORM. The module injects a migration that creates a hidden database user with superuser privileges and a known password, granting persistent DB access.

AI Hallucination Analysis
Very Likely AI Hallucination87%
Known to be hallucinated by: ChatGPT-4, Copilot
Remediation Guide
  1. Remove 'gorm-migrator' from go.mod immediately.
  2. Replace with the legitimate 'gorm.io/gorm'.
  3. Audit your database for unknown superuser accounts.
  4. Rotate database credentials.
Quick Facts
Ecosystem
Go
Risk Level
HIGH
Type
slopsquat
Status
ACTIVE
Legitimate Package
gorm.io/gorm
Hallucination Confidence
87%
Check My Project
Scan for this package