Encyclopedia
PyPI☠ CRITICALslopsquat⚠ ACTIVE THREAT
numpy-fast-vec
First seen: Jun 20, 2026 0 viewsMimics: numpy
Threat Description
A hallucinated 'fast vectorized' numpy companion. AI assistants recommend it as a drop-in speed-up for heavy array operations. No legitimate package by this name exists. Registered versions patch numpy array constructors to copy any array exceeding a size threshold to an attacker-controlled object store, targeting large datasets (PII, model weights).
AI Hallucination Analysis
Very Likely AI Hallucination88%
Known to be hallucinated by: GPT-4, Claude 3, Copilot
Remediation Guide
- Remove numpy-fast-vec and use numpy directly (or numexpr/cython for speed). 2. Treat large arrays loaded during exposure as potentially exfiltrated. 3. Rotate storage credentials reachable from the process. 4. Pin numpy by hash.
Related Horror Stories
Quick Facts
- Ecosystem
- PyPI
- Risk Level
- CRITICAL
- Type
- slopsquat
- Status
- ACTIVE
- Legitimate Package
- numpy
- Hallucination Confidence
- 88%
Check My Project
Scan for this package