Encyclopedia
Go⚠ HIGHphantom⚠ ACTIVE THREAT

go-resty-client

First seen: Feb 25, 2025 0 viewsMimics: github.com/go-resty/resty/v2
Share threatHN
Threat Description

A phantom Go HTTP client that AI tools suggest as a 'simpler' alternative to go-resty. The registered version logs every request URL, body, and Authorization header to an external service.

AI Hallucination Analysis
Very Likely AI Hallucination91%
Known to be hallucinated by: ChatGPT-4, Gemini 1.5 Pro
Remediation Guide
  1. Remove 'go-resty-client' from go.mod immediately.
  2. Replace with the legitimate 'github.com/go-resty/resty/v2'.
  3. Audit your codebase for imports of the malicious module.
  4. Rotate any credentials or tokens that may have been logged.
Quick Facts
Ecosystem
Go
Risk Level
HIGH
Type
phantom
Status
ACTIVE
Legitimate Package
github.com/go-resty/resty/v2
Hallucination Confidence
91%
Check My Project
Scan for this package