MAL-2026-15860 Malicious code in py-0requests (PyPI)

py-0requests is a homoglyph typosquat of the PyPI package requests (letter o replaced with digit 0). On import py_0requests, top-level code in the package's __init__.py scrapes os.environ for keys prefixed with SECRET, API, TOKEN, or KEY and sends the collected dictionary over a TCP socket to a host/port read from TS_HOST/TS_PORT (defaulting to 127.0.0.1:9999). The same import path spawns a Python subprocess that opens a TCP connection to the same destination, sends a SHELL marker, and holds the socket open, providing a reverse-shell handshake to whichever operator controls the destination. The package's CLI banner self-identifies as targeting requests and ships no HTTP-client API.

During import, the code exfiltrates potentially sensitive env variables. In all analyzed versions the exfiltration target was a localhost, suggesting it was just a test.

Category: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.

Campaign: 2026-09-0requests

Reasons (based on the campaign):

• exfiltration-env-variables

• typosquatting