Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,159 npm 223,989 PyPI 12,020 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,020 reports · Feed

PyPI
odoo-addon-spp-base 99.0.0
MAL-2026-5367 ossf-package-analysis, amazon-inspector

Jun 8, 2026
PyPI
bittensor-burn-alert 1.7.3, 1.7.4, 1.7.5
MAL-2026-5330 kam193, amazon-inspector

Jun 8, 2026
PyPI
spaysdatarbx 0.1.3, 0.1.5
MAL-2026-5329 kam193, amazon-inspector 2 IOCs

Jun 8, 2026
PyPI
bt-burn-watch 1.4.0
MAL-2026-5312 kam193, amazon-inspector

Jun 8, 2026
PyPI
bittensor-burn-monitor 1.5.0, 1.5.3, 1.5.5, 1.6.0, 1.6.3, 1.6.5, 1.7.0
MAL-2026-5311 kam193, amazon-inspector

Jun 8, 2026
PyPI
openai-mcp 2.41.1, 2.41.2
MAL-2026-5320 kam193, amazon-inspector

Jun 8, 2026
PyPI
tiktoken-mcp 0.13.1, 0.13.2
MAL-2026-5326 kam193, amazon-inspector

Jun 8, 2026
PyPI
tlask 3.1.3, 3.1.4
MAL-2026-5305 kam193, amazon-inspector

Jun 8, 2026
PyPI
rlask 3.1.3, 3.1.4, 3.1.5, 3.1.6, 3.1.7
MAL-2026-5303 kam193, amazon-inspector

Jun 8, 2026
PyPI
rsquests 2.34.2, 2.34.3
MAL-2026-5304 kam193, amazon-inspector

Jun 8, 2026
PyPI
nhmpy 2.4.6, 2.4.7
MAL-2026-5302 kam193, amazon-inspector

Jun 8, 2026
PyPI
bittensor-burn-watch 1.2.0, 1.2.2, 1.2.3, 1.2.4, 1.2.5, 1.2.6, 1.2.7, 1.2.9, 1.2.10, 1.2.11, 1.2.12,…
MAL-2026-5292 kam193, amazon-inspector

Jun 7, 2026
PyPI
clip-logger 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.1.0, 1.1.1, 1.1.2
MAL-2026-5293 kam193

Jun 7, 2026
PyPI
ray-mcp-server 0.2.1
MAL-2026-5325 kam193, amazon-inspector

Jun 6, 2026
PyPI
pyphetools 0.9.120
MAL-2026-5324 kam193, amazon-inspector

Jun 6, 2026
PyPI
ppkt2synergy 0.1.1
MAL-2026-5323 kam193, amazon-inspector

Jun 6, 2026
PyPI
phenopacket-store-toolkit 0.1.7
MAL-2026-5322 kam193, amazon-inspector

Jun 6, 2026
PyPI
orchestr8-platform 3.3.2
MAL-2026-5321 kam193, amazon-inspector

Jun 6, 2026
PyPI
mem8 6.0.1
MAL-2026-5319 kam193, amazon-inspector

Jun 6, 2026
PyPI
langchain-core-mcp 1.4.2, 1.4.3
MAL-2026-5318 kam193, amazon-inspector

Jun 6, 2026
PyPI
instructor-mcp 1.15.2, 1.15.3
MAL-2026-5317 kam193, amazon-inspector

Jun 6, 2026
PyPI
gpsea 0.9.14
MAL-2026-5316 kam193, amazon-inspector

Jun 6, 2026
PyPI
ensmallen 0.8.101
MAL-2026-5315 kam193, amazon-inspector

Jun 6, 2026
PyPI
embiggen 0.11.97
MAL-2026-5314 kam193, amazon-inspector

Jun 6, 2026
PyPI
dreamgen 1.8.1
MAL-2026-5313 kam193, amazon-inspector

Jun 6, 2026
PyPI
mflux-streamlit 0.0.3, 0.0.4
MAL-2026-5301 kam193, amazon-inspector

Jun 6, 2026
PyPI
funcdesc 0.2.2, 0.2.3
MAL-2026-5300 kam193, amazon-inspector

Jun 6, 2026
PyPI
pantheon-agents 0.6.1, 0.6.2
MAL-2026-5299 kam193, amazon-inspector

Jun 6, 2026
PyPI
executor-engine 0.3.4, 0.3.5
MAL-2026-5298 kam193, amazon-inspector

Jun 6, 2026
PyPI
magique 0.6.8, 0.6.9
MAL-2026-5296 kam193, amazon-inspector

Jun 6, 2026
PyPI
coolbox 0.4.1, 0.4.2
MAL-2026-5295 kam193, amazon-inspector

Jun 6, 2026
PyPI
magique-ai 0.4.5, 0.4.4
MAL-2026-5294 kam193, amazon-inspector

Jun 6, 2026
PyPI
cmd2func 0.2.2, 0.2.3
MAL-2026-5290 kam193, amazon-inspector

Jun 6, 2026
PyPI
ufish 0.1.2, 0.1.3
MAL-2026-5285 kam193

Jun 6, 2026
PyPI
synago 0.1.1, 0.1.2
MAL-2026-5284 kam193, amazon-inspector

Jun 6, 2026
PyPI
okite 0.0.7, 0.0.8
MAL-2026-5283 kam193, amazon-inspector

Jun 6, 2026
PyPI
mrbios 0.1.1, 0.1.2
MAL-2026-5282 kam193, amazon-inspector

Jun 6, 2026
PyPI
executor-http 0.1.3, 0.1.4
MAL-2026-5281 kam193, amazon-inspector

Jun 6, 2026
PyPI
bramin 0.0.3, 0.0.4, 0.0.2
MAL-2026-5280 kam193, amazon-inspector

Jun 6, 2026
PyPI
uprobe 0.1.3, 0.1.4
MAL-2026-5279 kam193, amazon-inspector

Jun 6, 2026