Encyclopedia
PyPI☠ CRITICALtyposquat⚠ ACTIVE THREAT

jeilyfish

First seen: Oct 2, 2026 0 viewsMimics: jellyfish
Share threatHN
Threat Description

A typosquat of the jellyfish library (a capital 'i' and lowercase 'L' instead of two lowercase 'L's), detected on PyPI in December 2021 and documented by Sysdig. The package stole SSH and GPG keys from the developer's machine.

AI Hallucination Analysis
Unlikely AI Hallucination0%
Known to be hallucinated by: None - this is a real typosquat, not an AI hallucination.
Remediation Guide
  1. Remove jeilyfish and install the legitimate jellyfish. 2. Rotate SSH and GPG keys exposed during the window. 3. Audit requirements.txt for typosquatted names. 4. Enable pip require-hashes.
View on registry
Quick Facts
Ecosystem
PyPI
Risk Level
CRITICAL
Type
typosquat
Status
ACTIVE
Legitimate Package
jellyfish
Hallucination Confidence
0%
Check My Project
Scan for this package