requests-toolbelt-plus (PyPI) · Malicious Code
Affects requests-toolbelt-plusSource GCVE Database
Malicious package : remove requests-toolbelt-plus and rotate any secrets on hosts that installed it.
Data as of 9 Jul 2026, 09:51 UTC
Malicious package
Published to PyPI · OSV MAL-2026-5519
What to do
Remove requests-toolbelt-plus from every project, lockfile and image that pulls it in. Treat any host that installed it as compromised: rotate the credentials, tokens and keys it could read, from a clean machine.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| PyPIrequests-toolbelt-plus | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
Description
The requests-toolbelt-plus package on PyPI is a malicious package impersonating the legitimate requests-toolbelt library. During installation, it executes code that checks if the environment is Windows Subsystem for Linux (WSL). If so, it connects to a hardcoded attacker IP, sends system information, and establishes a persistent reverse shell via modifications to the user's .bashrc file. This allows full remote command execution and persistent access on affected developer machines running WSL.
References
- bad-packages.kam193.eu/pypi/package/requests-toolbelt-plus (opens in a new tab)
- pypi.org/project/requests-toolbelt-plus/99.9.9/ (opens in a new tab)
- pypi.org/project/requests-toolbelt-plus/100.0.0/ (opens in a new tab)
- pypi.org/project/requests-toolbelt-plus/99.9.10/ (opens in a new tab)
- pypi.org/project/requests-toolbelt-plus/2026.6.10.172624/ (opens in a new tab)