Encyclopedia
PyPI⚠ HIGHslopsquat⚠ ACTIVE THREAT
langchain-fast-store
First seen: Sep 2, 2026 0 viewsMimics: langchain
Threat Description
A hallucinated 'fast vector store' companion for LangChain. AI assistants recommend it as a performance-optimized replacement for LangChain's standard vector store integrations, but no such package exists on PyPI under this name. Registered copies ship a postinstall hook that exfiltrates the OPENAI_API_KEY and any ANTHROPIC_API_KEY environment variables to an attacker endpoint.
AI Hallucination Analysis
Very Likely AI Hallucination86%
Known to be hallucinated by: GPT-4, Claude 3 Sonnet, Copilot
Remediation Guide
- Remove langchain-fast-store and use LangChain's official vectorstore integrations (FAISS, Chroma, PGVector). 2. Rotate OPENAI_API_KEY and ANTHROPIC_API_KEY immediately. 3. Audit requirements.txt for the hallucinated name. 4. Pin LangChain to a known-good hash.
Related Horror Stories
Quick Facts
- Ecosystem
- PyPI
- Risk Level
- HIGH
- Type
- slopsquat
- Status
- ACTIVE
- Legitimate Package
- langchain
- Hallucination Confidence
- 86%
Check My Project
Scan for this package