Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 240,464 npm 223,298 PyPI 12,017 RubyGems 4,319 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,017 reports · Feed

PyPI
sap-quarterly-report 1.0.0
MAL-2026-14556 kam193

Aug 27, 2026
PyPI
ekx-report-utils 0.1.0, 0.2.0, 0.3.0, 0.4.0
MAL-2026-14555 kam193, amazon-inspector

Aug 27, 2026
PyPI
mathkitlite 0.1.0
MAL-2026-14552 kam193

Aug 27, 2026
PyPI
pybitjs 0.1.0
MAL-2026-14545 kam193, amazon-inspector 2 IOCs

Aug 26, 2026
PyPI
trongridet 0.0.1
MAL-2026-14542 kam193 4 IOCs

Aug 26, 2026
PyPI
0xfighter3 0.1
MAL-2026-14525 kam193

Aug 26, 2026
PyPI
bigquery-agent-analytics-tracing 0.0.0, 0.0.1
MAL-2026-14524 kam193

Aug 26, 2026
PyPI
rce-test 0.1
MAL-2026-14523 kam193

Aug 26, 2026
PyPI
syntaxerror-package-12345 0.1
MAL-2026-14522 kam193

Aug 26, 2026
PyPI
minecraft-ytreceiver 0.1.0, 0.2.0, 0.3.0, 0.4.0, 0.5.0
MAL-2026-14516 kam193, amazon-inspector

Aug 25, 2026
PyPI
python-walletlibr-v 0.7.9
MAL-2026-14488 amazon-inspector

Aug 25, 2026
PyPI
py-devoli-common 999.999.999
MAL-2026-15693 reversing-labs, amazon-inspector

Aug 24, 2026
PyPI
msrcpoc 99.1.9
MAL-2026-14444 ossf-package-analysis

Aug 24, 2026
PyPI
multyproccess 2.32.3, 2.32.4, 2.32.5, 2.32.6
MAL-2026-14401 kam193, amazon-inspector 1 IOC

Aug 24, 2026
PyPI
envprovision 1.2.0, 1.3.0, 1.4.0
MAL-2026-14389 kam193, amazon-inspector 4 IOCs

Aug 23, 2026
PyPI
cryptgraphy 1.0.0
MAL-2026-14388 kam193, amazon-inspector 1 IOC

Aug 23, 2026
PyPI
mlflow-otel-instrumentor 1.1.0
MAL-2026-14384 kam193, amazon-inspector 1 IOC

Aug 23, 2026
PyPI
scrambleeeer 0.1.0
MAL-2026-14358 kam193, amazon-inspector 1 IOC

Aug 22, 2026
PyPI
requests-crypt 0.1.0
MAL-2026-14351 kam193, amazon-inspector

Aug 21, 2026
PyPI
scrambleeer 0.1.0, 0.1.1
MAL-2026-14350 kam193, amazon-inspector 1 IOC

Aug 21, 2026
PyPI
boto4 1.0.0, 1.0.2
MAL-2026-14349 kam193, amazon-inspector

Aug 21, 2026
PyPI
reqcrypts 0.1.0, 0.1.1, 0.1.2, 0.1.3
MAL-2026-14341 kam193, amazon-inspector

Aug 21, 2026
PyPI
libasync 1.0.0
MAL-2026-14308 kam193, amazon-inspector 2 IOCs

Aug 19, 2026
PyPI
rc4-secure 1.0.0
MAL-2026-14306 kam193, amazon-inspector

Aug 19, 2026
PyPI
reqcrypt-dev 0.1.0
MAL-2026-14274 kam193, amazon-inspector

Aug 19, 2026
PyPI
deepface-weight 0.1.4
MAL-2026-14158 kam193, amazon-inspector

Aug 18, 2026
PyPI
reqcrypt 0.1.0
MAL-2026-14133 kam193, amazon-inspector

Aug 18, 2026
PyPI
deepface-weights 0.1.0, 0.1.1, 0.1.2
MAL-2026-14132 kam193, amazon-inspector

Aug 18, 2026
PyPI
infogram-bot 1.0.0, 1.2.0, 1.2.1, 1.3.0, 1.4.0, 1.5.0, 1.6.0, 1.6.1, 1.7.0, 1.8.0, 1.9.0
MAL-2026-14131 kam193, amazon-inspector 1 IOC

Aug 18, 2026
PyPI
httpz-requests 1.8.0, 1.9.0, 1.10.0, 1.11.0, 1.12.0, 1.13.0, 1.14.0, 1.15.0, 1.16.0, 1.17.0, 1…
MAL-2026-14130 kam193, amazon-inspector 1 IOC

Aug 18, 2026
PyPI
socks5901 1.0.0
MAL-2026-14100 kam193

Aug 17, 2026
PyPI
kb-ai 0.1.0, 0.1.1
MAL-2026-14069 kam193, amazon-inspector

Aug 16, 2026
PyPI
joule-sbx-poc 0.1.0
MAL-2026-13756 kam193 1 IOC

Aug 11, 2026
PyPI
telebot-pro 2.3.7, 2.3.8
MAL-2026-13757 kam193, amazon-inspector

Aug 11, 2026
PyPI
joule-btp-extension 0.1.6, 0.1.0, 0.1.1, 0.1.3, 0.1.4
MAL-2026-13732 ossf-package-analysis, kam193, amazon-inspector 1 IOC

Aug 11, 2026
PyPI
euler-sdk 1.0.0
MAL-2026-13730 kam193 1 IOC

Aug 11, 2026
PyPI
morpho-sdk 1.0.0
MAL-2026-13731 kam193 1 IOC

Aug 11, 2026
PyPI
dlmm-sdk 1.0.0
MAL-2026-13729 kam193, amazon-inspector 1 IOC

Aug 11, 2026
PyPI
dlmm 1.0.0
MAL-2026-13728 kam193 1 IOC

Aug 11, 2026
PyPI
bigtime 0.1.0
MAL-2026-13712 kam193, amazon-inspector

Aug 10, 2026