Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,159 npm 223,989 PyPI 12,020 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,020 reports · Feed

PyPI
spateo-release 1.1.2
MAL-2026-5278 kam193

Jun 6, 2026
PyPI
pantheon-toolsets 0.5.5, 0.5.6
MAL-2026-5277 kam193, amazon-inspector

Jun 6, 2026
PyPI
nucbox 0.1.2, 0.1.3
MAL-2026-5276 kam193, amazon-inspector

Jun 6, 2026
PyPI
napari-ufish 0.0.2, 0.0.3
MAL-2026-5275 kam193, amazon-inspector

Jun 6, 2026
PyPI
dynamo-release 1.5.4
MAL-2026-5274 kam193

Jun 6, 2026
PyPI
anthropy 0.0.1, 0.0.2, 0.0.3, 0.0.4, 0.0.5, 0.0.6
MAL-2026-5273 kam193, amazon-inspector 3 IOCs

Jun 5, 2026
PyPI
goodoltoulas 0.1.0
MAL-2026-5272 kam193, amazon-inspector 1 IOC

Jun 5, 2026
PyPI
goodoldtoulas 0.1.0
MAL-2026-5271 kam193, amazon-inspector 1 IOC

Jun 5, 2026
PyPI
sf-silly-goose-requests 0.1.0, 0.2.0
MAL-2026-5184 kam193 2 IOCs

Jun 4, 2026
PyPI
hpe-glcp-automation-lib 2.2160.0
MAL-2026-5183 kam193

Jun 4, 2026
PyPI
tronlabpy3 0.0.1
MAL-2026-5181 kam193 4 IOCs

Jun 3, 2026
PyPI
fia-signals 0.1.0, 0.1.3
MAL-2026-5177 kam193

Jun 3, 2026
PyPI
tronlab 0.0.1
MAL-2026-5178 kam193 4 IOCs

Jun 3, 2026
PyPI
internal-tracker 0.0.1, 0.0.2, 0.0.5
MAL-2026-5176 kam193

Jun 3, 2026
PyPI
spadata 0.1.0, 0.1.1
MAL-2026-5173 kam193 2 IOCs

Jun 3, 2026
PyPI
spaysdata 0.1.0, 0.2.0, 0.3.0, 0.4.0, 0.4.2, 0.4.4, 0.4.5
MAL-2026-5171 kam193 2 IOCs

Jun 2, 2026
PyPI
spaysrbdata 0.1.0, 0.2.0, 0.3.0, 0.4.0, 0.5.0
MAL-2026-5170 kam193 2 IOCs

Jun 2, 2026
PyPI
jules-test-utils 0.1.0
MAL-2026-5167 kam193

Jun 2, 2026
PyPI
bt-signal-utils 1.0.0, 1.0.1
MAL-2026-5160 kam193, reversing-labs 3 IOCs

Jun 2, 2026
PyPI
quant-backtest-helpers 1.0.1
MAL-2026-5152 kam193 3 IOCs

Jun 2, 2026
PyPI
parsimonius 0.10.0, 0.11.0, 0.11.1, 0.11.2, 0.11.3, 0.11.4, 0.11.5, 0.11.6, 0.12.0
MAL-2026-5151 kam193

Jun 2, 2026
PyPI
imgmatrix-analysis 0.1.0, 0.1.1, 0.1.2, 0.1.3, 0.1.4, 0.1.5, 0.1.6, 0.1.7, 0.1.8, 0.1.9
MAL-2026-5123 kam193 4 IOCs

Jun 1, 2026
PyPI
redteam-qxz7-utils 1.0.0
MAL-2026-5120 kam193 2 IOCs

Jun 1, 2026
PyPI
discord-massban 0.1.0
MAL-2026-5099 kam193

May 31, 2026
PyPI
obfuscation 3.23.0, 3.23.2, 3.23.3
MAL-2026-5100 kam193 4 IOCs

May 31, 2026
PyPI
cscc-glass-house 1.0.1, 1.0.2, 1.0.3, 1.0.4
MAL-2026-5096 kam193

May 31, 2026
PyPI
hell-cipher 1.0.1
MAL-2026-5094 kam193 4 IOCs

May 31, 2026
PyPI
h4xupdate 0.0.1
MAL-2026-5093 kam193

May 31, 2026
PyPI
discord-ban 1.0.0, 1.0.1, 1.0.2
MAL-2026-5091 kam193

May 30, 2026
PyPI
neuralforge-ml 0.9.9
MAL-2026-5090 kam193

May 30, 2026
PyPI
crypto-helper 1.0.0
MAL-2026-5088 kam193 2 IOCs

May 30, 2026
PyPI
cryptolock 1.0.0, 1.0.1
MAL-2026-5089 kam193 2 IOCs

May 30, 2026
PyPI
polymarket-data 2.0.0, 2.0.1
MAL-2026-5086 kam193, reversing-labs 6 IOCs

May 30, 2026
PyPI
modulebuild3240234t 1.0.0, 1.0.1, 2.0.0, 3.0.0
MAL-2026-5029 kam193 1 IOC

May 29, 2026
PyPI
lib-1779997093-yjeeqn 1.0.0
MAL-2026-4861 kam193

May 28, 2026
PyPI
veloxml-cli 0.1.0
MAL-2026-4862 kam193

May 28, 2026
PyPI
telethon-pro-safe 3.0.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4
MAL-2026-4859 kam193

May 28, 2026
PyPI
my-test-package-2025-xyz 1.0.1
MAL-2026-4837 kam193

May 28, 2026
PyPI
rogiant-install 2.5.0
MAL-2026-4835 kam193 20 IOCs

May 27, 2026
PyPI
quatres 3.0.1
MAL-2026-4829 kam193 3 IOCs

May 27, 2026