Unknown
This package is considered malicious because it extracts OS files of the localhost and sends the contents to an unknown Telegram channel.
Product
1 published CVE affecting pypi requestn, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
Newest publication first
This package is considered malicious because it extracts OS files of the localhost and sends the contents to an unknown Telegram channel.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.