Encyclopedia
PyPI☠ CRITICALslopsquat⚠ ACTIVE THREAT
mistral-sdk-fast
First seen: Apr 29, 2026 0 viewsMimics: mistralai
Threat Description
A hallucinated 'lightweight async client' for a well-known European AI lab's platform. AI coding assistants confidently recommend it as a faster alternative to the official SDK, but no such package exists on PyPI. Attackers pre-registered the name and shipped a wheel that exfiltrates the API key passed to the client constructor to an attacker-controlled endpoint on every request.
AI Hallucination Analysis
Very Likely AI Hallucination88%
Known to be hallucinated by: GPT-4, Claude 3, GitHub Copilot
Remediation Guide
- Remove mistral-sdk-fast and use the official SDK published under the lab's verified namespace. 2. Rotate any API keys that may have been passed to the malicious client. 3. Audit import statements across the codebase for the hallucinated name. 4. Pin the legitimate SDK by hash in your lockfile.
Related Horror Stories
Quick Facts
- Ecosystem
- PyPI
- Risk Level
- CRITICAL
- Type
- slopsquat
- Status
- ACTIVE
- Legitimate Package
- mistralai
- Hallucination Confidence
- 88%
Check My Project
Scan for this package