diff --git a/src/codemodder/scripts/get_hashes.py b/src/codemodder/scripts/get_hashes.py
index cae672aa..0e08a2fb 100644
--- a/src/codemodder/scripts/get_hashes.py
+++ b/src/codemodder/scripts/get_hashes.py
@@ -7,7 +7,7 @@ def get_package_hashes(package_name: str, version: str) -> list[str]:
     Fetch the SHA256 hashes for a given package version from PyPI.
     """
     url = f"https://pypi.org/pypi/{package_name}/{version}/json"
-    response = requests.get(url)
+    response = requests.get(url, timeout=60)
     hashes = []
 
     if response.status_code == 200: