Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

12,020 reports · Feed

  • PyPI
    generatellm 2.21, 2.22, 2.23
    MAL-2026-5773 kam193, amazon-inspector 5 IOCs
  • PyPI
    llamagenerator 2.22
    MAL-2026-5771 kam193, amazon-inspector 5 IOCs
  • PyPI
    llmgenerator 2.21
    MAL-2026-5770 kam193, amazon-inspector 5 IOCs
  • PyPI
    bash8 0.0.0, 1.0.0
    MAL-2026-5768 kam193, amazon-inspector
  • PyPI
    ezllmgen 2.21
    MAL-2026-5769 kam193, amazon-inspector 5 IOCs
  • PyPI
    easyaillm2 2.0.16, 2.0.17, 2.0.18, 2.0.67, 2.0.68
    MAL-2026-5765 kam193, amazon-inspector 5 IOCs
  • PyPI
    easyllmai 2.1, 2.21
    MAL-2026-5766 kam193, amazon-inspector 5 IOCs
  • PyPI
    easyaillm 2.0.15, 2.0.16
    MAL-2026-5756 kam193, amazon-inspector 4 IOCs
  • PyPI
    anthropickit 999.9.9
    MAL-2026-5755 kam193, amazon-inspector
  • PyPI
    salesforce-sysutils-diagnostics 0.1.0
    MAL-2026-5754 kam193, amazon-inspector
  • PyPI
    dash-grid-normalizer 0.0.2, 0.0.1, 0.0.5, 0.0.3, 0.0.4
    MAL-2026-5725 amazon-inspector, kam193 1 IOC
  • PyPI
    textwrap-toolkit-stager 1.0.0
    MAL-2026-5722 amazon-inspector, kam193 3 IOCs
  • PyPI
    flexitest 2.2160.0
    MAL-2026-5702 kam193
  • PyPI
    nagios-xi 19.4.0, 19.5.0
    MAL-2026-5698 kam193, amazon-inspector
  • PyPI
    jec 39.0.1
    MAL-2026-5684 kam193
  • PyPI
    trongapy 0.0.1
    MAL-2026-5683 kam193, amazon-inspector 4 IOCs
  • PyPI
    trongap 0.0.1
    MAL-2026-5681 kam193 4 IOCs
  • PyPI
    bittensor-burn-message 1.0.1
    MAL-2026-5680 kam193, amazon-inspector
  • PyPI
    pylogxo 1.0.3, 1.0.4
    MAL-2026-5679 kam193, amazon-inspector 2 IOCs
  • PyPI
    bibip-bip 0.1.0
    MAL-2026-5649 kam193, amazon-inspector
  • PyPI
    acme-widget-layout-utils 0.0.3, 0.0.1, 0.0.2
    MAL-2026-5545 amazon-inspector, kam193 1 IOC
  • PyPI
    icinga 99.1.0, 99.2.0
    MAL-2026-5532 kam193, amazon-inspector
  • PyPI
    telegramlite 1.0.0, 1.0.1
    MAL-2026-5531 kam193, amazon-inspector 2 IOCs
  • PyPI
    hello-dynamic 0.1.0, 0.1.1, 0.1.2
    MAL-2026-5518 kam193, amazon-inspector
  • PyPI
    requests-toolbelt-plus 99.9.9, 99.9.10, 100.0.0, 2026.6.10.172624
    MAL-2026-5519 kam193, amazon-inspector 1 IOC
  • PyPI
    bittensor-emission-tracker 1.0.1
    MAL-2026-5489 kam193, amazon-inspector
  • PyPI
    tao-subnet-metrics 1.0.1
    MAL-2026-5457 kam193, amazon-inspector
  • PyPI
    ultimate-ai-power 1.0.0
    MAL-2026-5458 kam193, amazon-inspector
  • PyPI
    cubifyanything 1.0.0, 1.0.1, 1.0.2
    MAL-2026-5404 kam193, amazon-inspector
  • PyPI
    dstill 0.3.0
    MAL-2026-5345 kam193, amazon-inspector 2 IOCs
  • PyPI
    xfoofoox 0.0.6
    MAL-2026-5340 kam193 3 IOCs
  • PyPI
    solana-web3-py 1.0.0
    MAL-2026-5338 kam193, amazon-inspector
  • PyPI
    solana-cli-py 1.0.0
    MAL-2026-5336 kam193, amazon-inspector
  • PyPI
    solana-web3 1.0.0
    MAL-2026-5337 kam193, amazon-inspector
  • PyPI
    spl-token-py 1.0.0
    MAL-2026-5339 kam193, amazon-inspector
  • PyPI
    xfoobar 0.0.5
    MAL-2026-5335 kam193, amazon-inspector 3 IOCs
  • PyPI
    spaysrbx 0.3.0
    MAL-2026-5334 kam193, amazon-inspector 2 IOCs
  • PyPI
    nerfstudio-gs 99.0.0, 99.0.1, 99.0.2, 99.0.3
    MAL-2026-5333 kam193, amazon-inspector 1 IOC
  • PyPI
    bittensor-burn 1.8.0, 1.8.1
    MAL-2026-5331 kam193, amazon-inspector
  • PyPI
    xforpy 0.0.1, 0.0.2, 0.0.3, 0.0.4
    MAL-2026-5332 kam193, amazon-inspector 3 IOCs