Hostile 100% python Download

requests-cache-utils 1.0.0

Downloads and executes remote malware

“Caching utilities for requests sessions”

Installer served from a bare public IPPowerShell hidden-window option flag
SHA-2562790f0a3f75dd48bf753f0c7360d6c9d2414a2edfbc87919564f7fc5ced33897
URLhttps://files.pythonhosted.org/packages/bb/84/f4c4040077ae4696c8d6de56d676e8a59f8abd13628a8f844a701c62f205/requests_cache_utils-1.0.0-py3-none-any.whl
MaleculeO₂(C₃S₂)H₃(Cm₅DbPo₆)Md(In)

Also flagged by osm (During installation and importing the module, the code downloads and executes an infostealer.), osv (MAL-2026-17191: Malicious code in requests-cache-utils (PyPI)) +4 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.