MalwarePublished 20 Jun 2026Updated 8 Jul 2026

request-cache-py (PyPI) · Malicious Code

Affects request-cache-pySource GCVE Database

Malicious package : remove request-cache-py and rotate any secrets on hosts that installed it.

Data as of 9 Jul 2026, 10:03 UTC

Classification

Malicious package

Published to PyPI · OSV MAL-2026-6245

What to do

Remove request-cache-py from every project, lockfile and image that pulls it in. Treat any host that installed it as compromised: rotate the credentials, tokens and keys it could read, from a clean machine.

Affected software

Product	Affected	Fixed in
PyPIrequest-cache-py	Affected 1.0.0 – 1.1.0 11 affected builds	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

The request-cache-py package on PyPI is a malicious library impersonating the legitimate requests-cache library. Upon import, it starts a background thread that harvests sensitive installer-side secrets including SSH private keys, AWS credentials, Git credentials, npm and Docker config files, and browser data such as saved logins, cookies, and history. It also collects environment variables containing sensitive keywords and exfiltrates all this data to a hardcoded Telegram bot. The package includes sandbox evasion techniques to avoid detection in CI environments and prevents repeated data exfiltration within 24 hours. This is a deliberate supply-chain credential stealer targeting developer workstations.

Impact

Successful import of this package leads to the theft of a wide range of sensitive credentials and secrets from the developer's environment, including SSH private keys, cloud credentials, Git credentials, npm and Docker configuration files, browser saved logins and cookies, and environment variables containing secrets. This can result in unauthorized access to source code repositories, cloud resources, developer accounts, and other sensitive systems. The exfiltration to a Telegram bot provides attackers with direct access to stolen secrets, enabling further compromise. The sandbox evasion reduces the chance of detection during automated analysis, increasing the risk of prolonged undetected compromise.

Defensive guidance

Users should immediately stop using the request-cache-py package and remove it from their environments. Verify that no sensitive credentials have been compromised and rotate any potentially exposed secrets, including SSH keys, cloud credentials, and API tokens. Use only verified and trusted packages from official sources, and consider implementing supply-chain security measures such as package signing and dependency auditing. Monitor for any suspicious activity related to exposed credentials.

References

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 9 Jul 2026, 10:03 UTC

Technical details

References

Community reviews