hash-utils-py was reported malicious
OSV:MAL-2026-2118 - Malicious code in hash-utils-py (PyPI)
hash-utils-py
1.0.0
This version was deleted from PyPI around 2026-03-24. Installing fails with:
$ pip3 install hash-utils-py==1.0.0
ERROR: Could not find a version that satisfies the requirement hash-utils-py==1.0.0
Install through StableBuild
You can install this package from StableBuild's PyPI snapshots from before the version was deleted:
pip3 install \
-i https://YOUR_API_KEY.pypimirror.stablebuild.com/2026-03-23/ \
hash-utils-py==1.0.0
Sign up for StableBuild to get an API key (it's free and takes <60 seconds!)
Or, download files manually
And install manually via pip:
hash_utils_py-1.0.0-py3-none-any.whl
(10.5KB)
hash_utils_py-1.0.0.tar.gz
(9.5KB)