Encyclopedia
PyPI⚠ HIGHslopsquat⚠ ACTIVE THREAT
fastapi-limiter-pro
First seen: May 29, 2026 0 viewsMimics: fastapi-limiter
Threat Description
A hallucinated 'pro' rate-limiter for FastAPI, recommended by AI assistants as a production-grade upgrade to the community fastapi-limiter. It does not exist as a legitimate package. Registered copies bundle a reverse shell that connects during application startup when the limiter is initialized.
AI Hallucination Analysis
Very Likely AI Hallucination80%
Known to be hallucinated by: GPT-4, Claude 3, Copilot
Remediation Guide
- Remove fastapi-limiter-pro and use the community fastapi-limiter or slowapi. 2. Inspect application startup logs for outbound connections. 3. Rotate any secrets reachable from the app process. 4. Add a dependency allowlist to your CI pipeline.
Quick Facts
- Ecosystem
- PyPI
- Risk Level
- HIGH
- Type
- slopsquat
- Status
- ACTIVE
- Legitimate Package
- fastapi-limiter
- Hallucination Confidence
- 80%
Check My Project
Scan for this package