Which versions of python-requirements are malicious?

The following PyPI versions of python-requirements are flagged malicious: 3.15.5, 3.15.6. Treat any of these as compromised.

How do I remediate python-requirements if I installed it?

python-requirements is built to steal secrets, so assume every credential the build or runtime could read is compromised. Remove it from your project and lockfile, then rotate ALL exposed secrets — npm/registry tokens, cloud keys, CI/CD secrets, SSH keys, and any .env values — from a known-clean machine. Audit logs for unauthorized use of those credentials.

I already installed python-requirements — how do I know if it already compromised me?

If python-requirements was installed, its post-install payload may already have run. Removing the package does not undo that — check outbound connections and credential use from the install window onward.

Is python-requirements part of a known attack campaign?

Yes — python-requirements is associated with the 2026-03-old-python-module-installer campaign. Packages in the same campaign often share infrastructure and payloads, so check whether any related packages are also in your dependency tree.

How do I find python-requirements across my projects, lockfiles, and CI pipelines?

Search your lockfiles and build artifacts for python-requirements (2 malicious versions).

Malicious package

python-requirementsPyPI

Advisory published Mar 6, 2026Updated Mar 6, 2026

python-requirements is a confirmed malicious PyPI package (MAL-2026-1264) that steals credentials and exfiltrates sensitive data (malicious versions 3.15.5, 3.15.6). Do not install it — remove it immediately and rotate any exposed credentials.

Malicious code in python-requirements (PyPI)

MAL-2026-1264

Immediate action

Remove the package, then rotate any secrets the build/runtime could reach.

pip uninstall python-requirements

What this malware does

The package clones a legitimate webdavclient3 library and modifies it to be an installer utility. During installation, the package exfiltrates the current working directory to a remote WebDAV server or Telegram Bot. Additionally, the package targets cryptocurrency operations in another suspicious project, https://github.com/fewcatltd/zkSync/

The install_modules() method injects code into two files, which are characteristic for this repository, and causes exfiltrating configuration files during cryptocurrency exchange operations.

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: 2026-03-old-python-module-installer

Reasons (based on the campaign):

impersonation
dependency-confusion
files-exfiltration
action-hidden-in-lib-usage
clones-real-package
crypto-related
exfiltration-crypto

Malicious versions

2 flagged

3.15.53.15.6

Indicators of compromise (SHA-256)

40fa77c47c3649fce85f601f8aa10bf13674e5db4a2d35f125cb48b77d65f99d

Detection & response playbook

Credential / info stealer

Find it
Search your lockfiles and build artifacts for python-requirements (2 malicious versions).
If you installed it — respond
python-requirements is built to steal secrets, so assume every credential the build or runtime could read is compromised. Remove it from your project and lockfile, then rotate ALL exposed secrets — npm/registry tokens, cloud keys, CI/CD secrets, SSH keys, and any .env values — from a known-clean machine. Audit logs for unauthorized use of those credentials.
Did it already run?
If python-requirements was installed, its post-install payload may already have run. Removing the package does not undo that — check outbound connections and credential use from the install window onward.

Frequently asked questions

No. python-requirements on PyPI has been identified as a malicious package (versions 3.15.5, 3.15.6 flagged). It should be removed immediately — do not install or keep it in your dependency tree.

Campaign

2026-03-old-python-module-installer

References

Credits

Kamil Mańkowski (kam193) · reporter

Detect & block this

O3 blocks python-requirements-class packages before install and in CI — and if it already ran, its runtime egress monitoring catches the credential exfiltration and severs the channel.

Malware detection Runtime egress monitoring

Explore

All malware advisories How O3 detects malware Vulnerability database