Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

12,020 reports · Feed

  • PyPI
    horde-python-client 99999.0.0
    MAL-2026-6734 kam193, amazon-inspector
  • PyPI
    epic-build-scripts 99999.0.0
    MAL-2026-6733 kam193, amazon-inspector
  • PyPI
    ue-python-tools 99999.0.0
    MAL-2026-6735 kam193, amazon-inspector
  • PyPI
    unreal-mladapter 99999.0.0
    MAL-2026-6736 kam193, amazon-inspector
  • PyPI
    dt-validator 0.3.0
    MAL-2026-6728 kam193, amazon-inspector 2 IOCs
  • PyPI
    starlette-healthcheck 1.3.0, 1.2.0, 1.3.1
    MAL-2026-6724 amazon-inspector, kam193 1 IOC
  • PyPI
    twrap-tool 1.0.0
    MAL-2026-6711 amazon-inspector, kam193 4 IOCs
  • PyPI
    django-bkvision 1.2.0
    MAL-2026-6593 kam193, amazon-inspector
  • PyPI
    skillspector 0.0.1, 0.0.2, 0.0.3, 0.0.4, 2.3.7, 2.3.8, 2.3.9, 2.3.10
    MAL-2026-6561 kam193, amazon-inspector 2 IOCs
  • PyPI
    tdata-grabber 1.0.0
    MAL-2026-6560 kam193, amazon-inspector 2 IOCs
  • PyPI
    fsociety-tools 1.0.0, 1.0.1, 1.0.2
    MAL-2026-6558 kam193, amazon-inspector 2 IOCs
  • PyPI
    pkg-fallback 1.1.0
    MAL-2026-6557 amazon-inspector, kam193
  • PyPI
    discord-token-generator 1.0.0, 1.0.1, 1.0.2, 1.0.3
    MAL-2026-6549 kam193, amazon-inspector 2 IOCs
  • PyPI
    pdf-converter-pro 1.0.0
    MAL-2026-6541 kam193, amazon-inspector
  • PyPI
    inlifegram 2.1.2.8, 2.1.2.9
    MAL-2026-6516 kam193, amazon-inspector
  • PyPI
    sqligen 1.0.0, 1.0.5, 1.0.6, 1.0.7, 1.0.8, 1.1.1, 1.1.3, 1.1.4
    MAL-2026-6515 kam193, amazon-inspector 8 IOCs
  • PyPI
    openblox 1.0.1, 1.0.0
    MAL-2026-6504 amazon-inspector, kam193 8 IOCs
  • PyPI
    extra-huggingface 0.4.0
    MAL-2026-6489 kam193, amazon-inspector 2 IOCs
  • PyPI
    pyext6cc8cd 1.0.0
    MAL-2026-6488 amazon-inspector
  • PyPI
    mi-test-99-tuapellido 99.9
    MAL-2026-6478 kam193, ossf-package-analysis, amazon-inspector
  • PyPI
    python-dateutil2 99.0.0
    MAL-2026-6400 kam193
  • PyPI
    gunicorm 0.0.1
    MAL-2026-6383 kam193, amazon-inspector 1 IOC
  • PyPI
    ditenv 0.0.1
    MAL-2026-6381 kam193, amazon-inspector 1 IOC
  • PyPI
    fkaks 0.0.1
    MAL-2026-6382 kam193, amazon-inspector 1 IOC
  • PyPI
    mcpsever 0.0.1
    MAL-2026-6384 kam193 1 IOC
  • PyPI
    security-alerts-sdk 1.0.3, 1.0.0, 1.0.1, 1.0.2
    MAL-2026-6327 amazon-inspector, kam193 2 IOCs
  • PyPI
    toorc 0.0.1
    MAL-2026-6290 kam193, amazon-inspector 1 IOC
  • PyPI
    equest 0.0.1
    MAL-2026-6289 kam193, amazon-inspector 1 IOC
  • PyPI
    ip-rotat 0.0.1
    MAL-2026-6280 kam193, amazon-inspector 1 IOC
  • PyPI
    inversiones-common 99.0.0, 99.0.1
    MAL-2026-6262 kam193, ossf-package-analysis, amazon-inspector
  • PyPI
    jsonschema-viewer 0.1.0
    MAL-2026-6248 kam193, amazon-inspector 2 IOCs
  • PyPI
    requests-enhancer 1.4.2
    MAL-2026-6247 kam193, amazon-inspector 5 IOCs
  • PyPI
    d0rk3r 1.0.0, 1.0.2, 1.0.3, 1.0.4, 1.0.5, 1.0.6, 1.0.7, 1.0.8, 1.0.9, 1.1.0, 1.1.1, 1.…
    MAL-2026-6246 kam193, amazon-inspector 2 IOCs
  • PyPI
    d0rk3r-telemetry 1.0.0, 1.0.1
    MAL-2026-6244 kam193, amazon-inspector 2 IOCs
  • PyPI
    request-cache-py 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5, 1.0.6, 1.0.7, 1.0.8, 1.0.9, 1.1.0
    MAL-2026-6245 kam193, amazon-inspector 2 IOCs
  • PyPI
    query-profile 0.0.1, 0.0.2, 0.0.3
    MAL-2026-6236 kam193, ossf-package-analysis, amazon-inspector
  • PyPI
    fluent-dashboard-panel-metrics 0.1.0
    MAL-2026-6233 kam193, amazon-inspector 1 IOC
  • PyPI
    improvado-layout-panel-metrics 0.1.0, 0.1.1
    MAL-2026-6231 kam193, ossf-package-analysis, amazon-inspector 1 IOC
  • PyPI
    django-auth-middleware-plus 99.99.99
    MAL-2026-6230 kam193, amazon-inspector 2 IOCs
  • PyPI
    fastercoding 1.0.0
    MAL-2026-6208 kam193, amazon-inspector 1 IOC