Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 240,387 npm 223,246 PyPI 11,995 RubyGems 4,318 NuGet 782 crates.io 23 Go 20 Maven 2 Packagist 1

11,995 reports · Feed

PyPI
protecteda 0.1.0
MAL-2026-18584 kam193

Nov 3, 2026
PyPI
zyto 0.2.0, 0.2.1, 0.2.2, 0.2.3
MAL-2026-18582 kam193

Nov 3, 2026
PyPI
hijuko-pilara 1.0.0
MAL-2026-18581 kam193 4 IOCs

Nov 3, 2026
PyPI
filipt 0.1.0, 0.1.1, 0.1.2, 0.1.3, 0.1.4, 0.1.5
MAL-2026-18580 kam193, amazon-inspector

Nov 3, 2026
PyPI
pyprig 1.2.0, 1.2.1, 1.2.2
MAL-2026-18490 kam193, amazon-inspector

Nov 2, 2026
PyPI
privacypass-py 0.1.101, 0.1.99, 0.1.100
MAL-2026-18435 amazon-inspector, kam193

Nov 1, 2026
PyPI
pystr-codec 0.1.0, 0.1.1, 0.1.2
MAL-2026-18432 kam193, amazon-inspector 2 IOCs

Nov 1, 2026
PyPI
doctreelstm 1.0.0, 10.0.0
MAL-2026-18430 kam193, amazon-inspector

Oct 31, 2026
PyPI
multi-convert 0.1.0, 0.1.1, 0.1.2, 0.1.3, 0.1.4, 0.1.5
MAL-2026-18429 kam193 2 IOCs

Oct 31, 2026
PyPI
md-to-slides 0.1.0, 0.1.1, 0.1.2, 0.1.3
MAL-2026-18428 kam193 2 IOCs

Oct 31, 2026
PyPI
skills-analyzer 0.1.0, 0.1.1, 0.1.2
MAL-2026-18427 kam193 2 IOCs

Oct 31, 2026
PyPI
is-it-ai 0.1.0, 0.1.1, 0.1.3
MAL-2026-18426 kam193, amazon-inspector 2 IOCs

Oct 31, 2026
PyPI
stdid-nyxprobe 0.0.1, 0.0.2
MAL-2026-18406 kam193, amazon-inspector

Oct 30, 2026
PyPI
log-utils-sdk 0.4.1
MAL-2026-18405 kam193, amazon-inspector 12 IOCs

Oct 30, 2026
PyPI
twitter-request-diagnostics 1.0.0
MAL-2026-18403 kam193, amazon-inspector

Oct 29, 2026
PyPI
test-01-rafamarrara-learning-dc 1.0.0
MAL-2026-18402 kam193, amazon-inspector

Oct 29, 2026
PyPI
bq-helix-build-hook-6ade983e 0.1.0
MAL-2026-18395 kam193, amazon-inspector 2 IOCs

Oct 29, 2026
PyPI
bq-helix-recon-6ade983e 0.1.0, 0.1.2
MAL-2026-18396 kam193, amazon-inspector 2 IOCs

Oct 29, 2026
PyPI
poc-revshell 0.1.0
MAL-2026-18378 amazon-inspector

Oct 29, 2026
PyPI
seapy-ops 1.0.0, 1.0.1, 1.0.2, 1.1.0, 1.1.1, 1.1.2, 1.2.1, 1.2.2
MAL-2026-17880 amazon-inspector 2 IOCs

Oct 29, 2026
PyPI
trajmetrics 0.5.3
MAL-2026-18354 kam193, amazon-inspector 1 IOC

Oct 27, 2026
PyPI
numprint 1.2.0
MAL-2026-18343 kam193, amazon-inspector 1 IOC

Oct 27, 2026
PyPI
h13t0ry-hello-demo 0.1.0
MAL-2026-18336 kam193, amazon-inspector 1 IOC

Oct 27, 2026
PyPI
netweavex 1.1.0, 1.1.1, 1.1.2
MAL-2026-18328 kam193, amazon-inspector 2 IOCs

Oct 26, 2026
PyPI
zagents-framework 6.25.30.10b5, 99.25.30.10b5
MAL-2026-18327 kam193

Oct 26, 2026
PyPI
changes-lxc-wrapper 0.0.0, 0.1.0
MAL-2026-18326 kam193, amazon-inspector

Oct 26, 2026
PyPI
dictmerge-lite 1.0.0
MAL-2026-18301 kam193 3 IOCs

Oct 26, 2026
PyPI
claudeopuseni 0.1.0, 0.1.1
MAL-2026-18299 kam193, amazon-inspector 7 IOCs

Oct 25, 2026
PyPI
claudeopusenifile 0.1.3
MAL-2026-18300 kam193 7 IOCs

Oct 25, 2026
PyPI
claudeopusfile 0.1.1, 0.1.2
MAL-2026-18298 kam193, amazon-inspector 7 IOCs

Oct 25, 2026
PyPI
nebulallm 1.4.3
MAL-2026-18297 kam193, amazon-inspector 4 IOCs

Oct 25, 2026
PyPI
zagents-message-bus 1.0.5, 1.0.10, 99.99.99, 99.99.100
MAL-2026-18296 kam193, amazon-inspector

Oct 25, 2026
PyPI
fontus 0.0.1, 0.0.2, 0.0.3
MAL-2026-18271 kam193, amazon-inspector 3 IOCs

Oct 25, 2026
PyPI
sitecard 0.1.0, 0.1.1, 0.1.2, 0.1.3, 0.1.6, 0.1.7, 0.1.8, 0.1.9, 0.1.10, 0.1.11, 0.1.12,…
MAL-2026-18242 kam193, amazon-inspector

Oct 23, 2026
PyPI
jobwharf 0.1.0
MAL-2026-18228 kam193, amazon-inspector

Oct 23, 2026
PyPI
slatejob 0.1.0
MAL-2026-18237 kam193, amazon-inspector

Oct 23, 2026
PyPI
reedworker 0.1.0
MAL-2026-18234 kam193, amazon-inspector

Oct 23, 2026
PyPI
loadferry 0.1.0
MAL-2026-18231 kam193, amazon-inspector

Oct 23, 2026
PyPI
runpier 0.1.0
MAL-2026-18235 kam193, amazon-inspector

Oct 23, 2026
PyPI
sedgehaul 0.1.0
MAL-2026-18236 kam193, amazon-inspector

Oct 23, 2026