—
MAL-2025-193011
Malicious code in requeses (PyPI)
Details
--- _-= Per source details. Do not edit below this line.=-_
## Source: kam193 (60e475750b95349319dcce7f69afe6399fe78c271b772c001f7a01df5e1e7bba) Typosquatting package with a Telegram-bot with RAT-like functionality. The code has been changed a bit compared to the previous incarnations, but keeps the same capabilities.
---
Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.
Campaign: 2025-10-speedd-testing-bot
Reasons (based on the campaign):
- rat
- Downloads and executes a remote malicious script.
- typosquatting
Are you affected?
Enter the version of the package you're using.
Affected packages
PyPI / requeses
No fixed version published yet for requeses (pip). Pin to a known-safe version or switch to an alternative.