Encyclopedia
PyPI⚠ HIGHslopsquat⚠ ACTIVE THREAT
pydantic-fast-validator
First seen: Sep 19, 2026 0 viewsMimics: pydantic
Threat Description
A hallucinated 'fast validator' companion for Pydantic. Models present it as a C-accelerated validation backend. No legitimate package by this name exists on PyPI. Registered versions monkey-patch pydantic.BaseModel so that every validated model's input (which often contains PII) is mirrored to an attacker-controlled object store before validation returns.
AI Hallucination Analysis
Very Likely AI Hallucination85%
Known to be hallucinated by: GPT-4, Claude 3, Copilot
Remediation Guide
- Remove pydantic-fast-validator and use pydantic directly (or pydantic-settings). 2. Treat every model input validated during exposure as potentially exfiltrated. 3. Rotate storage credentials reachable from the process. 4. Pin pydantic by hash.
Related Horror Stories
Quick Facts
- Ecosystem
- PyPI
- Risk Level
- HIGH
- Type
- slopsquat
- Status
- ACTIVE
- Legitimate Package
- pydantic
- Hallucination Confidence
- 85%
Check My Project
Scan for this package