MAL-2026-1262

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/fastapis-requests/MAL-2026-1262.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-1262
Published
2026-03-06T11:34:31Z
Modified
2026-03-06T12:35:05.399224Z
Summary
Malicious code in fastapis-requests (PyPI)
Details

-= Per source details. Do not edit below this line.=-

Source: kam193 (69baeb910fc47c2e92e2a25cb1db7b5148b4773d193f15aecef4d708f69b1f6d)

The package clones a legitimate library and contains hidden code that executes remote scripts. During the analysis, the remote code was no longer available

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: 2026-03-fastapi-requests

Reasons (based on the campaign):

  • Downloads and executes a remote malicious script.

  • clones-real-package

  • typosquatting

  • action-hidden-in-lib-usage

Database specific 
{
    "iocs": {
        "domains": [
            "cleverstack-ext30341.vercel.app"
        ]
    },
    "malicious-packages-origins": [
        {
            "id": "pypi/2026-03-fastapi-requests/fastapis-requests",
            "sha256": "69baeb910fc47c2e92e2a25cb1db7b5148b4773d193f15aecef4d708f69b1f6d",
            "source": "kam193",
            "versions": [
                "2.32.5"
            ],
            "modified_time": "2026-03-06T11:34:31.184602Z",
            "import_time": "2026-03-06T12:15:45.610869467Z"
        }
    ]
}
References
Credits

Affected packages

PyPI / fastapis-requests

Package

Name
fastapis-requests
View open source insights on deps.dev
Purl
pkg:pypi/fastapis-requests

Affected ranges

Affected versions

2.*
2.32.5

Database specific

source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/fastapis-requests/MAL-2026-1262.json"