Malicious code in httpz-requests (PyPI)
The PyPI package httpz-requests contained deliberately injected malicious code providing Telegram-based remote access, file exfiltration, credential theft, and persistence mechanisms. The package was identified as part of a coordinated malicious campaign (2026-08-httpz-requests) by the OpenSSF.
- Disclosed
- Last updated
- Blast radius
- Unknown; depends on installation count and deployment scope
- Ecosystems
- Attack vectors
- Threat actor
- Affected entities
- httpz-requestsMultiple versions on PyPI
The httpz-requests package on PyPI was found to contain malicious code deliberately designed to compromise systems. Upon import, the package automatically establishes persistence and launches a malicious process that provides remote access via Telegram bot integration.\n\nThe malware implements multiple attack capabilities including file exfiltration, credential harvesting, and remote access trojan (RAT) functionality. The code was obfuscated and includes native extensions to evade detection and analysis.\n\nThis incident was identified and attributed to campaign 2026-08-httpz-requests by the OpenSSF's malicious-packages project. The package was deliberately created and distributed with the explicit intent to compromise and control target machines.\n\nAffected users should immediately uninstall the package, audit systems for compromise indicators, and revoke any credentials that may have been exposed.
Indicators of compromise
- Packages
- httpz-requests
Remediation
- Immediately uninstall httpz-requests from all systems
- Audit system logs and network traffic for Telegram bot communication
- Revoke all credentials and secrets that may have been accessed by the malware
- Scan systems for persistence mechanisms and malicious processes
- Review file access logs for unauthorized exfiltration
- Monitor for indicators of compromise related to campaign 2026-08-httpz-requests
- Use security tools to detect and remove any native extensions installed by the package
Sources
- GitHub Advisory GHSA-pm38-ccxh-j59w · GitHub Advisory Database
Cite this entry
"Malicious code in httpz-requests (PyPI)." supplychainattack.org, Supply Chain Attack Incident Catalog. Disclosed August 18, 2026; last updated August 18, 2026. https://supplychainattack.org/incident/malicious-code-in-httpz-requests-pypi-3dg8f6
Suggest a correction
Found an error or have a newer source? Corrections to factual errors take priority over new entries.
Related incidents
- resolvedcritical
Malicious code in reqcrypt-dev (PyPI)
The PyPI package reqcrypt-dev contained malicious code implementing a hidden backdoor. The package masqueraded as an HTTP request library but secretly monitored responses for specific fields and executed their content without user knowledge.
PyPICompromised package - resolvedcritical
Malicious code in deepface-weight (PyPI)
The PyPI package deepface-weight contained malicious code that exfiltrated Telegram session files on import, granting attackers full access to associated Telegram accounts. The package was a typosquat of the legitimate deepface ML library with no actual machine-learning functionality.
PyPICompromised package - resolvedcritical
Malicious code in reqcrypt (PyPI)
The reqcrypt PyPI package contains intentionally hidden malicious code that executes arbitrary Python code from attacker-controlled HTTP responses. The PayloadProcessor unconditionally inspects every HTTP response for specific JSON keys and passes base64/gzip/zlib-decoded values to exec(), enabling remote code execution on any system using the library.
PyPICompromised packageMalicious maintainer - containedcritical
Malicious code in deepface-weights (PyPI)
deepface-weights, a malicious package published to PyPI, contains code that exfiltrates Telegram session credentials on import. The package impersonates the legitimate deepface library but contains only credential-stealing functionality.
PyPICompromised package