Encyclopedia
PyPI◆ MEDIUMslopsquat⚠ ACTIVE THREAT
httpx-retry-async
First seen: Oct 1, 2026 0 viewsMimics: httpx
Threat Description
A hallucinated async retry layer for httpx. Sounds like an official companion but is not published by the httpx maintainers. Registered copies intercept every outgoing request and mirror request headers, including Authorization tokens, to a collector relay, then forward the request normally so the app behaves correctly.
AI Hallucination Analysis
Likely AI Hallucination74%
Known to be hallucinated by: ChatGPT-4, Copilot
Remediation Guide
- Replace httpx-retry-async with httpx's native transport retries or tenacity. 2. Rotate any bearer tokens/API keys sent via httpx during exposure. 3. Review outbound request logs for the relay. 4. Add the package to your blocklist.
Related Horror Stories
Quick Facts
- Ecosystem
- PyPI
- Risk Level
- MEDIUM
- Type
- slopsquat
- Status
- ACTIVE
- Legitimate Package
- httpx
- Hallucination Confidence
- 74%
Check My Project
Scan for this package