Encyclopedia
Go⚠ HIGHslopsquat⚠ ACTIVE THREAT

go-jwt-middleware

First seen: Jul 8, 2026 0 viewsMimics: github.com/golang-jwt/jwt
Share threatHN
Threat Description

A hallucinated JWT middleware module for Go. Models present it as a production-grade auth middleware. No legitimate module by this path exists. Registered versions log every request's Authorization header to a file and attempt to exfiltrate it via DNS to an attacker-controlled domain on a timer.

AI Hallucination Analysis
Very Likely AI Hallucination77%
Known to be hallucinated by: GPT-4, Copilot
Remediation Guide
  1. Remove go-jwt-middleware and use github.com/golang-jwt/jwt with your own middleware. 2. Rotate all JWT signing keys. 3. Audit DNS egress for the attacker domain. 4. Rebuild binaries and verify go.sum.
View on registry
Quick Facts
Ecosystem
Go
Risk Level
HIGH
Type
slopsquat
Status
ACTIVE
Legitimate Package
github.com/golang-jwt/jwt
Hallucination Confidence
77%
Check My Project
Scan for this package