Malicious code in requests-crypt (PyPI)
The PyPI package 'requests-crypt' version 0.1.0 contains a hidden backdoor. While it advertises itself as an HTTP request library with extra features, it secretly inspects responses for specific fields and executes their content if found. This behavior constitutes malicious code embedded in the package.
AI Analysis
Technical Summary
The 'requests-crypt' package on PyPI, specifically version 0.1.0, includes a concealed backdoor. Its intended functionality is to provide HTTP request capabilities with additional functions. However, on each use, it covertly checks for certain fields in HTTP responses and executes the content of those fields, effectively allowing remote code execution triggered by crafted responses. This malicious behavior classifies the package as a supply chain threat with clear backdoor functionality.
Potential Impact
Users who install and use 'requests-crypt' version 0.1.0 risk executing arbitrary code delivered via specially crafted HTTP responses. This can lead to compromise of the host environment, unauthorized actions, and potential further exploitation. The package acts as a backdoor, undermining trust in the software supply chain.
Mitigation Recommendations
No official patch or remediation is currently documented. Users should avoid installing or using 'requests-crypt' version 0.1.0. If already installed, remove the package immediately and verify system integrity. Monitor for any suspicious activity related to this package. Since this is a malicious package, the best mitigation is to not use it and rely on trusted alternatives.
Malicious code in requests-crypt (PyPI)
Description
The PyPI package 'requests-crypt' version 0.1.0 contains a hidden backdoor. While it advertises itself as an HTTP request library with extra features, it secretly inspects responses for specific fields and executes their content if found. This behavior constitutes malicious code embedded in the package.
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The 'requests-crypt' package on PyPI, specifically version 0.1.0, includes a concealed backdoor. Its intended functionality is to provide HTTP request capabilities with additional functions. However, on each use, it covertly checks for certain fields in HTTP responses and executes the content of those fields, effectively allowing remote code execution triggered by crafted responses. This malicious behavior classifies the package as a supply chain threat with clear backdoor functionality.
Potential Impact
Users who install and use 'requests-crypt' version 0.1.0 risk executing arbitrary code delivered via specially crafted HTTP responses. This can lead to compromise of the host environment, unauthorized actions, and potential further exploitation. The package acts as a backdoor, undermining trust in the software supply chain.
Mitigation Recommendations
No official patch or remediation is currently documented. Users should avoid installing or using 'requests-crypt' version 0.1.0. If already installed, remove the package immediately and verify system integrity. Monitor for any suspicious activity related to this package. Since this is a malicious package, the best mitigation is to not use it and rely on trusted alternatives.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- MAL-2026-14351
- Osv Schema Version
- 1.7.4
- Aliases
- []
- Ecosystems
- ["PyPI"]
- Database Specific Severity
- null
- Cvss Version
- null
Threat ID: 6a885f22acd9273b493f8042
Added to database: 08/21/2026, 14:22:26 UTC
Last enriched: 08/21/2026, 14:33:03 UTC
Last updated: 08/21/2026, 22:25:03 UTC
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.