Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 240,465 npm 223,299 PyPI 12,017 RubyGems 4,319 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,017 reports · Feed

PyPI
rasterkit 1.0.0, 1.0.2, 1.0.4
MAL-2026-10974 kam193, amazon-inspector 4 IOCs

Jul 21, 2026
PyPI
rasterkit-demo 0.1.0
MAL-2026-10975 kam193, amazon-inspector 4 IOCs

Jul 21, 2026
PyPI
fluffy-octo-broccoli 0.1.0
MAL-2026-10973 kam193, amazon-inspector

Jul 21, 2026
PyPI
trongridmy 0.0.1
MAL-2026-10930 kam193 4 IOCs

Jul 20, 2026
PyPI
trongrider 0.0.1
MAL-2026-10929 kam193, amazon-inspector 4 IOCs

Jul 20, 2026
PyPI
roles-royce 2.1.1, 2.1.0
MAL-2026-10927 amazon-inspector, kam193 4 IOCs

Jul 20, 2026
PyPI
defi-kit 2.1.1
MAL-2026-10926 amazon-inspector, kam193 4 IOCs

Jul 20, 2026
PyPI
automatic-octo-invention 0.1.0, 0.1.1, 0.1.2, 0.1.3
MAL-2026-10918 kam193, amazon-inspector

Jul 20, 2026
PyPI
ml-core-airflow-auth 0.0.1
MAL-2026-10919 kam193, amazon-inspector 8 IOCs

Jul 20, 2026
PyPI
shark-e2e-bnsneo 0.2.9, 0.2.10, 0.3.1
MAL-2026-10912 reversing-labs, amazon-inspector

Jul 20, 2026
PyPI
mysuperlicense 0.1.0
MAL-2026-10911 reversing-labs

Jul 20, 2026
PyPI
mysupergoodpython 0.1.0
MAL-2026-10910 reversing-labs

Jul 20, 2026
PyPI
ibreak 0.1.2, 0.1.3, 0.1.4
MAL-2026-10909 reversing-labs

Jul 20, 2026
PyPI
hello-world-test-mh3 0.0.1
MAL-2026-10908 reversing-labs, amazon-inspector

Jul 20, 2026
PyPI
hello-world-test-mh2 0.0.1
MAL-2026-10907 reversing-labs, amazon-inspector

Jul 20, 2026
PyPI
paperclip-ai 0.1.0, 0.1.1
MAL-2026-10869 kam193, amazon-inspector 3 IOCs

Jul 20, 2026
PyPI
neroteam-v1 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5, 1.0.6, 1.0.7
MAL-2026-10868 kam193, amazon-inspector

Jul 20, 2026
PyPI
vantrala 0.1.1
MAL-2026-10867 kam193, amazon-inspector

Jul 20, 2026
PyPI
nemopush 0.1.0, 0.1.1, 0.1.2, 0.1.3
MAL-2026-10866 kam193, amazon-inspector

Jul 20, 2026
PyPI
kimitalk 0.1.0, 0.1.1, 0.1.2
MAL-2026-10865 kam193, amazon-inspector

Jul 20, 2026
PyPI
kimichat 0.1.0, 0.1.1
MAL-2026-10864 kam193, amazon-inspector

Jul 20, 2026
PyPI
telebot-bot-run 0.5, 0.3, 0.4
MAL-2026-10863 ossf-package-analysis, kam193, amazon-inspector 9 IOCs

Jul 20, 2026
PyPI
data-parser-utils 2.4.1
MAL-2026-10780 kam193, amazon-inspector 14 IOCs

Jul 19, 2026
PyPI
tinkoff-cloud-apis-internal 0.0.1, 8.5.3, 8.5.4
MAL-2026-10917 kam193, amazon-inspector 8 IOCs

Jul 18, 2026
PyPI
python-devplatform-client 0.0.1, 8.5.3, 8.5.4
MAL-2026-10916 kam193, amazon-inspector 8 IOCs

Jul 18, 2026
PyPI
mlflow-ui 2.7.1, 2.7.2, 2.7.3
MAL-2026-10779 kam193, amazon-inspector 7 IOCs

Jul 18, 2026
PyPI
dwh-kafka-client 0.0.1
MAL-2026-10915 kam193, amazon-inspector 8 IOCs

Jul 17, 2026
PyPI
trongridme 0.0.1
MAL-2026-10771 kam193 4 IOCs

Jul 17, 2026
PyPI
govpkg 0.1.0, 0.2.0
MAL-2026-10770 kam193, amazon-inspector 2 IOCs

Jul 17, 2026
PyPI
trongridev 0.0.1
MAL-2026-10768 kam193 4 IOCs

Jul 17, 2026
PyPI
abseil-py 0.1.0
MAL-2026-10760 kam193, amazon-inspector

Jul 16, 2026
PyPI
mfq-private-encoder 1.0.0
MAL-2026-10758 amazon-inspector

Jul 16, 2026
PyPI
dde-common 0.0.1, 8.5.3, 8.5.4
MAL-2026-10757 amazon-inspector, kam193 8 IOCs

Jul 16, 2026
PyPI
darkglitch 1.2.0, 1.2.9, 1.4.5, 1.4.4
MAL-2026-10756 amazon-inspector

Jul 16, 2026
PyPI
a3s-code 5.2.8, 5.3.3
MAL-2026-10753 amazon-inspector

Jul 16, 2026
PyPI
captcha-solve-api 0.0.1, 8.5.3, 8.5.4
MAL-2026-10755 amazon-inspector, kam193 8 IOCs

Jul 16, 2026
PyPI
airflow-provider-spirit 0.0.1, 8.5.3, 8.5.4
MAL-2026-10754 amazon-inspector, kam193 8 IOCs

Jul 16, 2026
PyPI
ryry-cli 6.28, 6.26
MAL-2026-10759 amazon-inspector

Jul 16, 2026
PyPI
discordia-telemetria 0.1.1, 0.1.2
MAL-2026-10702 kam193, amazon-inspector 3 IOCs

Jul 16, 2026
PyPI
discord-telemetry 0.1.0, 0.1.1, 0.1.2, 0.1.3, 0.1.4, 0.1.5
MAL-2026-10701 kam193, amazon-inspector 3 IOCs

Jul 16, 2026