Encyclopedia
RubyGems⚠ HIGHslopsquat⚠ ACTIVE THREAT
rails-auth-jwt
First seen: Apr 2, 2026 0 viewsMimics: devise-jwt / jwt
Threat Description
A hallucinated JWT auth gem for Rails. Sounds like a natural companion to Devise but is not published by the Devise team. Registered versions patch the JWT encode path to silently append the Rails secret_key_base to each issued token's payload before signing, allowing the attacker to forge valid tokens offline.
AI Hallucination Analysis
Very Likely AI Hallucination79%
Known to be hallucinated by: GPT-4, Claude 3, Copilot
Remediation Guide
- Remove rails-auth-jwt and use devise-jwt + the jwt gem. 2. Rotate secret_key_base and invalidate all sessions. 3. Audit issued tokens for unexpected payload fields. 4. Pin gems by checksum.
Quick Facts
- Ecosystem
- RubyGems
- Risk Level
- HIGH
- Type
- slopsquat
- Status
- ACTIVE
- Legitimate Package
- devise-jwt / jwt
- Hallucination Confidence
- 79%
Check My Project
Scan for this package