Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,151 npm 223,981 PyPI 12,020 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,020 reports · Feed

  • PyPI
    fastercode 0.1.0, 0.1.1, 1.0.0
    MAL-2026-6206 kam193, amazon-inspector 1 IOC
  • PyPI
    shoaib-done-pack 1.0.0
    MAL-2026-6207 kam193
  • PyPI
    fluent-panel-metrics 0.1.0
    MAL-2026-6182 kam193, amazon-inspector 1 IOC
  • PyPI
    randpicker 0.1.0
    MAL-2026-6138 kam193
  • PyPI
    dotenv-sync 1.0.0
    MAL-2026-6082 kam193, amazon-inspector
  • PyPI
    disksweep 1.0.0
    MAL-2026-6081 kam193, amazon-inspector
  • PyPI
    syncagents 1.0.1, 1.0.2
    MAL-2026-6083 kam193, amazon-inspector
  • PyPI
    boardflow 1.0.1, 1.0.0
    MAL-2026-6080 amazon-inspector, kam193 4 IOCs
  • PyPI
    pystylish 2.9
    MAL-2026-6076 amazon-inspector, kam193 3 IOCs
  • PyPI
    telegram-lite-grabber 1.0.0
    MAL-2026-6051 kam193, amazon-inspector 2 IOCs
  • PyPI
    tobihook 1.0.4
    MAL-2026-5995 amazon-inspector, kam193 2 IOCs
  • PyPI
    cache-compat-utils 0.1.0
    MAL-2026-5878 kam193, amazon-inspector
  • PyPI
    temp-development-package-test 0.1, 0.2, 0.3, 0.4
    MAL-2026-5876 kam193, amazon-inspector 8 IOCs
  • PyPI
    myfirstpackagetestaaa 2.26
    MAL-2026-5875 kam193 8 IOCs
  • PyPI
    aaaazzzzaz 2.26
    MAL-2026-5874 kam193 8 IOCs
  • PyPI
    datacamp-light 99.0.0
    MAL-2026-5868 kam193, amazon-inspector
  • PyPI
    testpackagemanyhttpsgo 2.26
    MAL-2026-5840 kam193, amazon-inspector 6 IOCs
  • PyPI
    twrap-toolkit 1.0.0
    MAL-2026-5841 kam193, amazon-inspector 4 IOCs
  • PyPI
    cipherflow 0.1.2, 0.1.3, 0.1.0, 0.1.1
    MAL-2026-5839 amazon-inspector, kam193 6 IOCs
  • PyPI
    intel-ai-safety-explainer 2.2160.0
    MAL-2026-5814 kam193
  • PyPI
    hello-test-s1 0.1.0, 0.3.0, 0.3.1
    MAL-2026-5812 kam193, amazon-inspector 1 IOC
  • PyPI
    merino-common 2.2160.0
    MAL-2026-5817 kam193
  • PyPI
    node-scraper 2.2160.0
    MAL-2026-5820 kam193
  • PyPI
    dispatch-internal-plugins 2.2160.0
    MAL-2026-5810 kam193
  • PyPI
    llvm-aie 2.2160.0
    MAL-2026-5816 kam193
  • PyPI
    gigl-core 0.3.1
    MAL-2026-5811 kam193
  • PyPI
    databricks-tools-core 2.2160.0
    MAL-2026-5809 kam193
  • PyPI
    mlir-aie 2.2160.0
    MAL-2026-5818 kam193
  • PyPI
    intel-ai-safety 0.0.0, 2.2160.0
    MAL-2026-5813 kam193
  • PyPI
    sl-pgp 2.2160.0
    MAL-2026-5823 kam193
  • PyPI
    kinto-slack 2.2160.0
    MAL-2026-5815 kam193
  • PyPI
    mozautomation 2.2160.0
    MAL-2026-5819 kam193
  • PyPI
    scriptworker-client 2.2160.0
    MAL-2026-5822 kam193
  • PyPI
    pyptllm 0.2
    MAL-2026-5821 kam193 5 IOCs
  • PyPI
    testpgagent 0.2, 0.1
    MAL-2026-5824 amazon-inspector, kam193 5 IOCs
  • PyPI
    neurodrift 1.21
    MAL-2026-5797 kam193 5 IOCs
  • PyPI
    llmfree 2.21
    MAL-2026-5796 kam193 5 IOCs
  • PyPI
    gptminifast 2.21
    MAL-2026-5795 kam193 5 IOCs
  • PyPI
    fastgptmini 2.21, 2.22, 2.23, 2.24, 2.25, 2.26
    MAL-2026-5776 kam193, amazon-inspector 2 IOCs
  • PyPI
    ckanext-dms 0.1.0, 0.1.1
    MAL-2026-5775 kam193, ossf-package-analysis