PyPI package intelligence

requestts — deep security report

ShadowCanopy's full breakdown of requestts on PyPI: verdict, AI analysis, dependency chain, network behavior, prebuilds, and obfuscated code.

Dangerous — known malicious
This package matches a known-malicious advisory and is blocked by ShadowCanopy by default.
Scanned 7/16/2026
Known maliciousrequestts@1.0.0View on registry ↗latest: 1.0.0

This package matches a known-malicious advisory (MAL-2022-7439) and is blocked by ShadowCanopy by default across every project. 1 flagged version.

Re-evaluated: now known malicious — MAL-2022-7439

Protect your projects free

Security findings (1)

Static analysis rule matches, with the exact code that triggered them.

criticalKnown malicious packageATK-012package.json

Newly listed in malicious intel after approval (local, MAL-2022-7439)

How ShadowCanopy checks PyPI packages

ShadowCanopy blocks every dependency by default and only lets through what it can verify — against live malicious-package advisories, an AI behavior scan, and a byte-for-byte hash check. It protects installs across npm, PyPI, crates.io, pkg.go.dev, RubyGems, Maven Central, NuGet, Packagist, Hex, pub.dev, Swift Package Manager.

Protect your projects freeSee what's being blocked

This report reflects ShadowCanopy's threat intelligence at page load and is informational, not a warranty. Canonical URL: https://shadowcanopy.dev/packages/pypi/requestts