Supply chain
Malicious packages · PyPI
Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.
Source: OpenSSF Malicious Packages via OSV.dev
12,020 reports · Feed
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
-
PyPI
skillspector 0.0.1, 0.0.2, 0.0.3, 0.0.4, 2.3.7, 2.3.8, 2.3.9, 2.3.10MAL-2026-6561 kam193, amazon-inspector 2 IOCs
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
-
PyPI
sqligen 1.0.0, 1.0.5, 1.0.6, 1.0.7, 1.0.8, 1.1.1, 1.1.3, 1.1.4MAL-2026-6515 kam193, amazon-inspector 8 IOCs
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
-
PyPI
d0rk3r 1.0.0, 1.0.2, 1.0.3, 1.0.4, 1.0.5, 1.0.6, 1.0.7, 1.0.8, 1.0.9, 1.1.0, 1.1.1, 1.…MAL-2026-6246 kam193, amazon-inspector 2 IOCs
- PyPI
-
PyPI
request-cache-py 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5, 1.0.6, 1.0.7, 1.0.8, 1.0.9, 1.1.0MAL-2026-6245 kam193, amazon-inspector 2 IOCs
- PyPI
- PyPI
-
PyPI
improvado-layout-panel-metrics 0.1.0, 0.1.1MAL-2026-6231 kam193, ossf-package-analysis, amazon-inspector 1 IOC
- PyPI
- PyPI