netmanagement @0.1.1
Vulnerability report · Last retrieved from osv.dev August 14, 2026 at 4:33 PM UTC
OSV ID
MAL-2025-191802
Ecosystem
pypi
Summary
The package appears to be a PoC of overwriting "requests" package files. The new "requests/__init__.py" takes over common requests features and uses the implementation that a) logs every request to a file (but no external exfiltration, this may also be expected in some situations); b) after every 5 requests, opens the calculator app. The second shows clearly that the intention is to present a security risk, not create a real package. --- Category: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities. Campaign: 2025-08-netmanagement Reasons (based on the campaign): - action-hidden-in-lib-usage - other
Source: kam193 (9af8bc10bc4f751ad03dbe8257d2d8c49941accbf8b8fe6149d17a457fc56811)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.