Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 240,465 npm 223,299 PyPI 12,017 RubyGems 4,319 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,017 reports · Feed

  • PyPI
    plp-contract 2.0.0, 2.0.1, 2.0.2
    MAL-2026-13711 kam193, amazon-inspector 2 IOCs
  • PyPI
    neutrl-contracts 2.0.0, 2.0.1, 2.0.2
    MAL-2026-13709 kam193, amazon-inspector 2 IOCs
  • PyPI
    neutrl-core 2.0.0, 2.0.1, 2.0.2
    MAL-2026-13710 kam193, amazon-inspector 2 IOCs
  • PyPI
    chaintest 0.1.0
    MAL-2026-13686 kam193, amazon-inspector 2 IOCs
  • PyPI
    pytablute 1.0.3
    MAL-2026-13685 kam193 9 IOCs
  • PyPI
    btcflx 0.1.0
    MAL-2026-13682 kam193, amazon-inspector
  • PyPI
    btcflip 0.1.0
    MAL-2026-13681 kam193, amazon-inspector
  • PyPI
    kotoraka 0.1.0
    MAL-2026-13683 kam193, amazon-inspector
  • PyPI
    kotanku 0.1.0
    MAL-2026-13667 kam193
  • PyPI
    cubesat-upstream-driver 1.0.1
    MAL-2026-13666 kam193, amazon-inspector
  • PyPI
    riakcs 0.0.1, 0.5.0
    MAL-2026-13665 kam193
  • PyPI
    atlas-internal 1.8.1
    MAL-2026-13619 amazon-inspector, kam193
  • PyPI
    speed-hashes 0.1.0
    MAL-2026-13607 amazon-inspector, kam193 2 IOCs
  • PyPI
    fast-hashes 0.1.0
    MAL-2026-13490 kam193, amazon-inspector 2 IOCs
  • PyPI
    idnna 0.1.1, 0.1.2, 0.2.0, 0.3.0
    MAL-2026-13488 kam193, amazon-inspector 2 IOCs
  • PyPI
    pydanticc 0.1.1, 0.1.2, 0.2.0, 0.3.0
    MAL-2026-13489 kam193, amazon-inspector 2 IOCs
  • PyPI
    fastapii 0.1.1, 0.1.2, 0.2.0, 0.3.0
    MAL-2026-13486 kam193, amazon-inspector 2 IOCs
  • PyPI
    flasq 0.1.1, 0.1.2, 0.2.0, 0.3.0
    MAL-2026-13487 kam193, amazon-inspector 2 IOCs
  • PyPI
    alphalend-abi 1.0.0, 1.0.1, 1.1.0
    MAL-2026-13472 kam193 1 IOC
  • PyPI
    alphalend-layouts 4.1.0, 4.0.1, 4.0.0, 4.0.2
    MAL-2026-13473 amazon-inspector, kam193 1 IOC
  • PyPI
    xayoub-xctxteam 0.1.0, 0.1.1, 0.1.2
    MAL-2026-13426 amazon-inspector
  • PyPI
    decapod-common 0.0.0, 1.2.dev1, 1.2.dev2
    MAL-2026-13386 kam193, amazon-inspector
  • PyPI
    uncrypt 0.1.0, 0.1.1, 0.1.2
    MAL-2026-13380 kam193, amazon-inspector 1 IOC
  • PyPI
    solana-sniper-bot 1.4.2
    MAL-2026-13373 kam193 1 IOC
  • PyPI
    eth-account-wallet 0.11.2
    MAL-2026-13372 kam193, amazon-inspector 1 IOC
  • PyPI
    defi-sdk-py 2.5.1
    MAL-2026-13361 kam193 1 IOC
  • PyPI
    mnemonic-py 0.21
    MAL-2026-13362 kam193 1 IOC
  • PyPI
    numpyp 0.7.7
    MAL-2026-12503 amazon-inspector
  • PyPI
    gcli-control 0.12.2, 0.5.0, 0.12.4, 0.11.1
    MAL-2026-12502 amazon-inspector
  • PyPI
    crypto-wallet-sdk 1.8.3
    MAL-2026-12083 kam193 1 IOC
  • PyPI
    crypto-trading-toolkit 3.2.0
    MAL-2026-12082 kam193 1 IOC
  • PyPI
    bitcoinlib-py 0.9.0
    MAL-2026-12081 kam193 1 IOC
  • PyPI
    bip39-py 1.0.6
    MAL-2026-12080 kam193 1 IOC
  • PyPI
    psbt-helpers 1.0.0
    MAL-2026-11521 kam193 2 IOCs
  • PyPI
    launchdarkly-ai-server-sdk 1.0.1, 1.9.9
    MAL-2026-11519 kam193, amazon-inspector
  • PyPI
    psbt-utils 1.0.0
    MAL-2026-11520 kam193, amazon-inspector 2 IOCs
  • PyPI
    coldcard-helpers 1.4.2
    MAL-2026-11516 kam193, amazon-inspector
  • PyPI
    instalogin1234 0.0.1
    MAL-2026-11503 kam193, amazon-inspector 1 IOC
  • PyPI
    trongriden 0.0.1
    MAL-2026-11429 kam193 4 IOCs
  • PyPI
    wacve-utils 1.0.7
    MAL-2026-11428 kam193, amazon-inspector 1 IOC