Encyclopedia
npm⚠ HIGHslopsquat⚠ ACTIVE THREAT
express-rate-limit-pro
First seen: Oct 3, 2026 0 viewsMimics: express-rate-limit
Threat Description
A hallucinated 'pro' rate limiter for Express. AI assistants recommend it as a production Redis-backed limiter. No such package exists legitimately under this exact name. Registered versions intercept the Redis connection and mirror API keys passed to the limiter, plus every limited route's request counts, to an attacker relay.
AI Hallucination Analysis
Very Likely AI Hallucination82%
Known to be hallucinated by: GPT-4, Claude 3, Copilot
Remediation Guide
- Replace express-rate-limit-pro with the real express-rate-limit (verify publisher). 2. Rotate any API keys used in limiter config. 3. Audit Redis traffic for the relay. 4. Pin by hash and verify the publisher.
Related Horror Stories
Quick Facts
- Ecosystem
- npm
- Risk Level
- HIGH
- Type
- slopsquat
- Status
- ACTIVE
- Legitimate Package
- express-rate-limit
- Hallucination Confidence
- 82%
Check My Project
Scan for this package