Malicious code in py-2equests (PyPI)

Overview

---

-= Per source details. Do not edit below this line.=-

Source: kam193 (e77ec1203f9d490621144227c797d33bf3271c674bcc248fbaf16aaeca9bd106)

During import, the code exfiltrates potentially sensitive env variables. In all analyzed versions the exfiltration target was a localhost, suggesting it was just a test.

---

Category: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.

Campaign: 2026-09-0requests

Reasons (based on the campaign):

• exfiltration-env-variables

• typosquatting

Affected packages

• py-2equests

Remediation

Refer to the advisory for the patched release.