Encyclopedia
PyPI☠ CRITICALtyposquat⚠ ACTIVE THREAT

reqeusts

First seen: Jan 15, 2024 0 viewsMimics: requests
Share threatHN
Threat Description

Typosquat of the most-installed Python HTTP library 'requests'. The malicious package proxies all HTTP traffic through an attacker-controlled server, intercepting credentials, cookies, and tokens in transit.

AI Hallucination Analysis
Unlikely AI Hallucination18%
Known to be hallucinated by: n/a (typosquat)
Remediation Guide
  1. Remove 'reqeusts' from your dependencies immediately.
  2. Replace with the legitimate package 'requests'.
  3. Audit your codebase for any imports of the malicious package.
  4. Rotate any credentials, cookies, or tokens that may have been intercepted.
Quick Facts
Ecosystem
PyPI
Risk Level
CRITICAL
Type
typosquat
Status
ACTIVE
Legitimate Package
requests
Hallucination Confidence
18%
Check My Project
Scan for this package