Encyclopedia
PyPI☠ CRITICALtyposquat⚠ ACTIVE THREAT

python3-dateutil

First seen: Oct 4, 2026 0 viewsMimics: python-dateutil
Share threatHN
Threat Description

A typosquat of the python-dateutil library, detected on PyPI in December 2021 and documented by Sysdig. The package stole SSH and GPG keys. Note that some Linux distributions (e.g. Fedora) use 'python3-dateutil' as a legitimate system package name, but the PyPI package published under this name was malicious.

AI Hallucination Analysis
Unlikely AI Hallucination0%
Known to be hallucinated by: None - this is a real typosquat, not an AI hallucination.
Remediation Guide
  1. Remove the PyPI python3-dateutil and install the legitimate python-dateutil. 2. Rotate SSH and GPG keys exposed during the window. 3. Audit requirements.txt for typosquatted names. 4. Enable pip require-hashes.
View on registry
Quick Facts
Ecosystem
PyPI
Risk Level
CRITICAL
Type
typosquat
Status
ACTIVE
Legitimate Package
python-dateutil
Hallucination Confidence
0%
Check My Project
Scan for this package