Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 240,465 npm 223,299 PyPI 12,017 RubyGems 4,319 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,017 reports · Feed

PyPI
nvtorch-oot-nightly 99999.0.0, 99999.0.1
MAL-2026-11425 kam193, amazon-inspector

Aug 1, 2026
PyPI
trtllm-subdir-test 99999.0.0, 99999.0.1
MAL-2026-11426 kam193, amazon-inspector

Aug 1, 2026
PyPI
telerape 0.0.0.dev0, 1.0.0, 1.0.1
MAL-2026-11424 kam193

Jul 31, 2026
PyPI
asdk-plugin-ai-platform 0.0.1, 9999.0.0
MAL-2026-11421 kam193

Jul 31, 2026
PyPI
asdk-plugin-alphagen 0.0.1, 9999.0.0
MAL-2026-11422 kam193, ossf-package-analysis

Jul 31, 2026
PyPI
asdk-plugin-legacy 0.0.1, 9999.0.0
MAL-2026-11423 kam193

Jul 31, 2026
PyPI
aiprepkit 0.1.2
MAL-2026-11417 kam193, amazon-inspector 2 IOCs

Jul 31, 2026
PyPI
ailaunchkit 0.1.2
MAL-2026-11416 kam193, amazon-inspector 2 IOCs

Jul 31, 2026
PyPI
walmart-genai-trace 99.0.0
MAL-2026-11420 kam193

Jul 31, 2026
PyPI
catalogai 0.1.2
MAL-2026-11418 kam193, amazon-inspector 2 IOCs

Jul 31, 2026
PyPI
cognikit 0.1.2
MAL-2026-11419 kam193, amazon-inspector 2 IOCs

Jul 31, 2026
PyPI
aiassistcore 0.1.2
MAL-2026-11414 kam193, amazon-inspector 2 IOCs

Jul 31, 2026
PyPI
aichannel 0.1.2
MAL-2026-11415 kam193, amazon-inspector 2 IOCs

Jul 31, 2026
PyPI
reguestsc 2.34.2
MAL-2026-11413 kam193 1 IOC

Jul 31, 2026
PyPI
ml-data-shared 12.0.1, 16.0.1
MAL-2026-11199 kam193 1 IOC

Jul 30, 2026
PyPI
ml-nps-shared 6.0.3, 8.2.3
MAL-2026-11201 kam193 1 IOC

Jul 30, 2026
PyPI
ml-fdbk-shared 1.0.0, 2.3.1
MAL-2026-11200 kam193 1 IOC

Jul 30, 2026
PyPI
ml-shared 6.3.0, 8.8.0
MAL-2026-11202 kam193, amazon-inspector 1 IOC

Jul 30, 2026
PyPI
mcp-search-server 1.0.0, 2.0.0, 2.0.1
MAL-2026-11198 kam193, amazon-inspector

Jul 30, 2026
PyPI
ai-perf-toolkit 2.4.2
MAL-2026-11197 kam193, amazon-inspector

Jul 30, 2026
PyPI
phabricator-client 99.0.0, 99.0.1, 99.0.2, 99.0.3, 99.0.4
MAL-2026-11195 kam193, amazon-inspector

Jul 30, 2026
PyPI
vtranalytic 9.0.1, 9.0.4
MAL-2026-11156 amazon-inspector

Jul 28, 2026
PyPI
cfgzen 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5, 1.0.6
MAL-2026-11094 kam193, amazon-inspector 3 IOCs

Jul 27, 2026
PyPI
random-ua-generator 0.0.1
MAL-2026-11068 kam193 2 IOCs

Jul 26, 2026
PyPI
blessclient 0.0.1, 0.0.2
MAL-2026-11067 kam193, amazon-inspector

Jul 25, 2026
PyPI
trongridy 0.0.1
MAL-2026-11051 kam193 4 IOCs

Jul 24, 2026
PyPI
discordnv 0.8.0
MAL-2026-11050 kam193, amazon-inspector 3 IOCs

Jul 24, 2026
PyPI
mrmustard 0.7.4
MAL-2026-11049 kam193, amazon-inspector 2 IOCs

Jul 24, 2026
PyPI
intel-cicd-repo-infrastructure 0.0.0, 1.0.0
MAL-2026-11046 kam193

Jul 24, 2026
PyPI
karpatkit 2.1.0, 2.1.1
MAL-2026-11048 kam193, amazon-inspector 4 IOCs

Jul 24, 2026
PyPI
karpatkey 2.1.1
MAL-2026-11047 kam193, amazon-inspector 4 IOCs

Jul 24, 2026
PyPI
govapkg 0.1.0
MAL-2026-11031 kam193, amazon-inspector 3 IOCs

Jul 23, 2026
PyPI
torch-musa 0.0.0, 1.0.0
MAL-2026-10993 kam193

Jul 22, 2026
PyPI
dev-helper-bg 0.1.3, 0.1.4, 0.1.6, 0.1.7
MAL-2026-10992 kam193, amazon-inspector 2 IOCs

Jul 22, 2026
PyPI
make-helper 0.1.0, 0.1.1
MAL-2026-10991 kam193, amazon-inspector 2 IOCs

Jul 22, 2026
PyPI
comp-colors 0.1.5
MAL-2026-10986 kam193, amazon-inspector 3 IOCs

Jul 21, 2026
PyPI
animated-octo-spoon 0.1.0, 0.1.1
MAL-2026-10985 kam193, amazon-inspector

Jul 21, 2026
PyPI
reimagined-broccoli 0.1.0
MAL-2026-10978 kam193, amazon-inspector

Jul 21, 2026
PyPI
lebinfmt 1.0.0
MAL-2026-10977 kam193, amazon-inspector 4 IOCs

Jul 21, 2026
PyPI
colorstack 0.1.0, 0.1.1
MAL-2026-10976 kam193, amazon-inspector 3 IOCs

Jul 21, 2026