requesttss

{"modified":"2026-04-16T15:42:11Z","published":"2025-01-25T16:53:01Z","schema_version":"1.7.4","id":"MAL-2025-1994","summary":"Malicious code in requesttss (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: kam193 (12a8bc9313963cfa671547d93bfa32236afe6b7dfeeec048633a547aa05dbc12)\nClone of the requests package that modified the code to send all get and post requests to a hardcoded URL\n\n\n---\n\nCategory: MALICIOUS - The campaign has clearly malicious intent, like infostealers.\n\n\nCampaign: 2025-01-rqsts \n\n\nReasons (based on the campaign):\n\n\n - clones-real-package\n\n\n - dependency-confusion\n\n\n - action-hidden-in-lib-usage\n","affected":[{"package":{"ecosystem":"PyPI","name":"requesttss","purl":"pkg:pypi/requesttss"},"versions":["2.28.1","1.1.1"]}],"references":[{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/requesttss"}],"credits":[{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"]},{"name":"Kamil Mańkowski (kam193)","type":"ANALYST","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"]},{"name":"ReversingLabs","type":"FINDER","contact":["https://www.reversinglabs.com"]}],"database_specific":{"malicious-packages-origins":[{"source":"reversing-labs","sha256":"ff4f5b53c4f94fe47f59710010f219b935128c2a5bb207acfec6702663fdff32","import_time":"2025-03-03T15:07:17.269624219Z","id":"RLMA-2025-01237","modified_time":"2025-03-03T13:45:17Z","versions":["2.28.1"]},{"source":"kam193","sha256":"534cd9b41b514c90127542dea88d24d596d4528fecce2b5ea783e47ba49a1a27","import_time":"2025-12-02T22:30:55.540922289Z","id":"pypi/2025-01-rqsts/requesttss","modified_time":"2025-01-25T16:53:01Z","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]},{"source":"kam193","sha256":"12a8bc9313963cfa671547d93bfa32236afe6b7dfeeec048633a547aa05dbc12","import_time":"2025-12-02T23:07:18.579476791Z","id":"pypi/2025-01-rqsts/requesttss","modified_time":"2025-01-25T16:53:01Z","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]},{"source":"kam193","sha256":"bf4ac05c53d959e995caeee2ee5000af6d9e570a37686f7a777ef7f6c7ded10b","import_time":"2025-12-10T21:38:57.787535877Z","id":"pypi/2025-01-rqsts/requesttss","modified_time":"2025-01-25T16:53:01Z","versions":["2.28.1"]},{"source":"reversing-labs","sha256":"bd172130eba7e47288ce128c8cc7bb57e28de6e67330290baf9e4435873b994d","import_time":"2026-03-19T12:20:23.194983324Z","id":"RLUA-2026-00713","modified_time":"2026-03-18T12:18:17Z"},{"source":"reversing-labs","sha256":"4853bc2964e7e3d39cf0b211243f054a7bd5548ebbf7cfdb4f912f063d90687e","import_time":"2026-04-16T15:39:36.10865157Z","id":"RLUA-2026-02081","modified_time":"2026-04-16T10:27:41Z","versions":["1.1.1"]}]}}