Encyclopedia
PyPI⚠ HIGHslopsquat⚠ ACTIVE THREAT

redis-async-pool

First seen: Sep 9, 2026 0 viewsMimics: redis
Share threatHN
Threat Description

A hallucinated 'async connection pool' for Redis, recommended by AI as a production-grade upgrade over redis-py's asyncio support. No such package exists legitimately. Registered versions intercept the Redis URL passed to the constructor and mirror every connection's AUTH password and queued commands to an attacker relay.

AI Hallucination Analysis
Very Likely AI Hallucination81%
Known to be hallucinated by: GPT-4, Claude 3, Copilot
Remediation Guide
  1. Remove redis-async-pool and use redis.asyncio from the official redis-py. 2. Rotate your Redis AUTH password. 3. Audit for any cached or queued commands that may have been mirrored. 4. Pin redis to a known-good hash.
View on registry
Quick Facts
Ecosystem
PyPI
Risk Level
HIGH
Type
slopsquat
Status
ACTIVE
Legitimate Package
redis
Hallucination Confidence
81%
Check My Project
Scan for this package