scrypt-py 0.1.0

Guardian package: 'scrypt-py' is a commonly hallucinated package name. You probably meant 'scrypt'.

scrypt-py

This is a Guardian 2.0 defensive package.

The package name scrypt-py does not exist as a real Python library. It is a name commonly hallucinated by AI coding assistants (language models used for code generation). This package was registered to prevent malicious actors from registering it and distributing malware.

Did you mean scrypt?

pip uninstall scrypt-py
pip install scrypt

What is Guardian 2.0?

AI coding assistants sometimes suggest package names that don't exist on PyPI. Attackers can register these names and distribute malicious code to anyone who follows the AI's suggestion. Guardian 2.0 preemptively registers the most commonly hallucinated names with safe, warning-only packages.

This project is part of ongoing research into supply chain security risks introduced by AI coding agents.

Research

This package is part of the study "I Know What Your Agent Imported: AI Coding Agents as Supply Chain Attack Amplifiers."

License

MIT