{"id":"MAL-2026-14130","title":"Malicious code in httpz-requests (PyPI)","summary":"Malicious code in httpz-requests (PyPI)","severity":"none","vendor":"httpz-requests","product":"httpz-requests","ecosystem":"pip","affected":["httpz-requests"],"published":"2026-08-18","updated":"2026-08-19","source":"OSV","sourceUrl":"https://osv.dev/vulnerability/MAL-2026-14130","references":[{"url":"https://bad-packages.kam193.eu/pypi/package/httpz-requests"},{"url":"https://pypi.org/project/httpz-requests/1.14.0/"},{"url":"https://pypi.org/project/httpz-requests/1.16.0/"},{"url":"https://pypi.org/project/httpz-requests/1.11.0/"},{"url":"https://pypi.org/project/httpz-requests/1.21.0/"},{"url":"https://pypi.org/project/httpz-requests/1.21.2/"},{"url":"https://pypi.org/project/httpz-requests/1.21.4/"},{"url":"https://pypi.org/project/httpz-requests/1.13.0/"},{"url":"https://pypi.org/project/httpz-requests/1.19.0/"},{"url":"https://pypi.org/project/httpz-requests/1.21.5/"},{"url":"https://pypi.org/project/httpz-requests/1.21.1/"},{"url":"https://pypi.org/project/httpz-requests/1.10.0/"},{"url":"https://pypi.org/project/httpz-requests/1.21.3/"},{"url":"https://pypi.org/project/httpz-requests/1.15.0/"},{"url":"https://pypi.org/project/httpz-requests/1.18.0/"},{"url":"https://pypi.org/project/httpz-requests/1.12.0/"},{"url":"https://pypi.org/project/httpz-requests/1.17.0/"},{"url":"https://pypi.org/project/httpz-requests/1.8.0/"},{"url":"https://pypi.org/project/httpz-requests/1.20.0/"},{"url":"https://pypi.org/project/httpz-requests/1.9.0/"}],"tags":["osv","pip"],"ingestedAt":"2026-08-19T19:22:19.924Z","slug":"MAL-2026-14130","body":"## Overview\n\n\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (004770b4da0c6705f95ef2c8654fd81d37650ffacaad7160041bded02cdb7fbc)\nhttpz-requests exposes a Telegram bot (`start_bot`, `run_cmd_enc`, `http_request`) whose message handler executes arbitrary shell commands on the host running the package, granting a remote Telegram operator full command execution under the installer's user account. Documented remote commands include arbitrary shell execution (`chalao`, `.sh <command>`, `.py <file>`, `.exec <file>`), destructive filesystem operations (`rm -rf <path>`), single- and bulk-file exfiltration (`take <file>`, `take all`), a full-host backup mode that produces split 50MB archives with `.partNNN` chunking (`get all`), and environment-variable dumping (`.printenv`) — collectively enabling remote theft of filesystem contents and process-environment secrets (cloud, CI, and API credentials). The package is shipped only as compiled Cython `.so` files with no Python source, and self-describes obfuscation features that XOR+base64-encode command strings and disguise execution as `http_request(\"POST\",...)` so plaintext commands do not appear in `ps` or system logs; the Telegram bot token is stored encoded and decoded at runtime by `dec()`. The distribution name `httpz-requests` and import name `httpz_requests` resemble the top-100 PyPI package `requests` while presenting a Telegram remote-shell API instead of an HTTP client, and metadata is unfilled boilerplate (author `Aapka Naam <you@example.com>`, homepage `https://github.com/YOUR_GITHUB_USERNAME/httpz-requests`).\n\n## Source: kam193 (38eff923106836997e28de6d7173a1553da126be230b341fe64f0c4c215769a2)\nThe package provides Telegram-based remote access to the machine it runs on. It was deliberately created and used to hack other machines, exfiltrate files and credentials. This package automatically ensures persistence and starts a malicious process on import.\n\n\n---\n\nCategory: MALICIOUS - The campaign has clearly malicious intent, like infostealers.\n\n\nCampaign: 2026-08-httpz-requests\n\n\nReasons (based on the campaign):\n\n\n - files-exfiltration\n\n\n - rat\n\n\n - persistence\n\n\n - uses-telegram-bot\n\n\n - obfuscation\n\n\n - native-extension\n\n\n## Affected packages\n\n- `httpz-requests`\n\n## Remediation\n\nRefer to the advisory for the patched release.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}