Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 240,465 npm 223,299 PyPI 12,017 RubyGems 4,319 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,017 reports · Feed

  • PyPI
    qwen-asr-pvt 0.0.6
    MAL-2026-10690 amazon-inspector
  • PyPI
    pylogora 0.7.8
    MAL-2026-10689 kam193, amazon-inspector 13 IOCs
  • PyPI
    log-guru 0.7.8
    MAL-2026-10688 kam193 13 IOCs
  • PyPI
    trongridweb 0.0.1
    MAL-2026-10685 kam193 4 IOCs
  • PyPI
    xyq-drama-skill 0.1.0, 0.2.0, 0.3.0
    MAL-2026-10681 kam193, amazon-inspector, reversing-labs 4 IOCs
  • PyPI
    northstart-sdk 0.1.0, 0.2.0, 0.2.1, 0.2.2
    MAL-2026-10672 kam193, amazon-inspector 3 IOCs
  • PyPI
    data-proxy-for-test 0.1.1
    MAL-2026-10642 amazon-inspector
  • PyPI
    ethereum-input-decorder 1.2.4, 1.2.2
    MAL-2026-10643 amazon-inspector, kam193 8 IOCs
  • PyPI
    proxy-checker-j 0.1.0
    MAL-2026-10644 amazon-inspector, kam193
  • PyPI
    tronwe 0.0.1
    MAL-2026-10624 kam193 4 IOCs
  • PyPI
    cosmos-gradio 9999.0.0, 9999.0.1
    MAL-2026-10618 kam193, amazon-inspector
  • PyPI
    cosmos-cuda 9999.0.0, 9999.0.1
    MAL-2026-10617 kam193, amazon-inspector
  • PyPI
    proxy-check-ii 0.1.0
    MAL-2026-10610 kam193, amazon-inspector
  • PyPI
    tennacity 1.0.0, 1.2.0, 1.2.2
    MAL-2026-10576 kam193, amazon-inspector 8 IOCs
  • PyPI
    pokee-data-utils 1.0.1
    MAL-2026-10547 amazon-inspector
  • PyPI
    browser-use-headless 0.1.4
    MAL-2026-10484 amazon-inspector, kam193 3 IOCs
  • PyPI
    turbocalcng 0.1.0, 0.2.0
    MAL-2026-10441 kam193, amazon-inspector 1 IOC
  • PyPI
    fast-dotenv 1.0.0
    MAL-2026-10215 kam193, amazon-inspector 1 IOC
  • PyPI
    pipspeed 0.1.0
    MAL-2026-10213 amazon-inspector, kam193 1 IOC
  • PyPI
    jupiter-sdk 0.1.0, 0.1.1
    MAL-2026-10196 kam193, amazon-inspector 3 IOCs
  • PyPI
    eth-agent 1.0.0, 1.0.1
    MAL-2026-10195 kam193, amazon-inspector 3 IOCs
  • PyPI
    metemask-sdk 1.2.0, 1.2.1
    MAL-2026-10197 kam193, amazon-inspector 3 IOCs
  • PyPI
    solidity-dev 1.3.0
    MAL-2026-10194 kam193, amazon-inspector
  • PyPI
    defi-tools 0.8.0
    MAL-2026-10192 kam193, amazon-inspector
  • PyPI
    data-harvester 0.3.1
    MAL-2026-10191 kam193, amazon-inspector
  • PyPI
    py-base58 2.1.3, 2.1.4
    MAL-2026-10193 kam193, amazon-inspector
  • PyPI
    turbocalc 0.1.0
    MAL-2026-10139 kam193 1 IOC
  • PyPI
    sankislayer 1.0.0
    MAL-2026-10119 kam193
  • PyPI
    proxy-check-i 0.1.0, 0.1.1
    MAL-2026-10100 amazon-inspector, kam193
  • PyPI
    qlinforge 0.3.2
    MAL-2026-10091 kam193, amazon-inspector, ossf-package-analysis, reversing-labs 3 IOCs
  • PyPI
    playwrightr 1.0.0, 1.0.1
    MAL-2026-10020 kam193, amazon-inspector 4 IOCs
  • PyPI
    tronsev 0.0.1
    MAL-2026-7025 kam193 4 IOCs
  • PyPI
    dbzy-tools 1.0.1
    MAL-2026-7023 amazon-inspector
  • PyPI
    turbom 1.0.0, 1.0.1
    MAL-2026-7015 kam193
  • PyPI
    manom 1.2.2
    MAL-2026-7007 kam193
  • PyPI
    manik 1.2.1
    MAL-2026-7006 kam193
  • PyPI
    tronpak 0.0.1
    MAL-2026-6983 kam193 4 IOCs
  • PyPI
    manin 0.0.1, 0.1.0, 0.1.1
    MAL-2026-6978 kam193
  • PyPI
    turbod 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5, 1.0.6, 1.0.7
    MAL-2026-6979 kam193
  • PyPI
    py-slugify 0.8.2
    MAL-2026-6976 kam193 3 IOCs