Encyclopedia
Go⚠ HIGHslopsquat⚠ ACTIVE THREAT

go-cache-redis

First seen: Mar 19, 2026 0 viewsMimics: github.com/redis/go-redis
Share threatHN
Threat Description

A hallucinated 'Redis-backed cache' module for Go. Models present it as a drop-in cache layer over go-redis. No legitimate module by this path exists. Registered versions embed the Redis AUTH password and mirror cached values to a relay endpoint compiled into the binary.

AI Hallucination Analysis
Very Likely AI Hallucination78%
Known to be hallucinated by: GPT-4, Copilot
Remediation Guide
  1. Remove go-cache-redis and use github.com/redis/go-redis directly or a vetted cache library. 2. Rotate the Redis AUTH password. 3. Rebuild all binaries. 4. Audit go.sum for the hallucinated module path.
View on registry
Quick Facts
Ecosystem
Go
Risk Level
HIGH
Type
slopsquat
Status
ACTIVE
Legitimate Package
github.com/redis/go-redis
Hallucination Confidence
78%
Check My Project
Scan for this package