Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,159 npm 223,989 PyPI 12,020 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,020 reports · Feed

PyPI
ninja-ssh-proto 1.0.2, 1.0.4
MAL-2026-3398 kam193 1 IOC

May 8, 2026
PyPI
ninja-core-optimizer 1.3.3, 1.3.4
MAL-2026-3396 kam193 2 IOCs

May 8, 2026
PyPI
eth-wallet-kit 1.0.0
MAL-2026-3389 kam193 2 IOCs

May 8, 2026
PyPI
wallet-scanner-pro 1.0.0
MAL-2026-3392 kam193 2 IOCs

May 8, 2026
PyPI
tron-energy-sdk 1.0.0
MAL-2026-3391 kam193 2 IOCs

May 8, 2026
PyPI
crypto-bot-utils 1.0.0
MAL-2026-3388 kam193 2 IOCs

May 8, 2026
PyPI
web3-tool-sdk 1.0.0
MAL-2026-3393 kam193 2 IOCs

May 8, 2026
PyPI
solana-py-sdk 1.0.0
MAL-2026-3390 kam193 2 IOCs

May 8, 2026
PyPI
justinleaguekems 1.0.0
MAL-2026-3380 kam193

May 8, 2026
PyPI
yeahmankema 1.0.0, 1.0.1
MAL-2026-3386 kam193

May 8, 2026
PyPI
wallet-utils-pro 1.0.0, 1.0.1
MAL-2026-3383 kam193 2 IOCs

May 8, 2026
PyPI
solana-scanner 1.0.0
MAL-2026-3381 kam193 2 IOCs

May 8, 2026
PyPI
eth-toolkit 1.0.0
MAL-2026-3378 kam193 2 IOCs

May 8, 2026
PyPI
crypto-wallet-utils 1.0.0
MAL-2026-3377 kam193 2 IOCs

May 8, 2026
PyPI
web3-helper 1.0.0
MAL-2026-3385 kam193 2 IOCs

May 8, 2026
PyPI
web3-connect 1.0.0
MAL-2026-3384 kam193 2 IOCs

May 8, 2026
PyPI
solana-wallet-utils 1.0.0
MAL-2026-3382 kam193 2 IOCs

May 8, 2026
PyPI
eth-web3-utils 1.0.0
MAL-2026-3379 kam193 2 IOCs

May 8, 2026
PyPI
crypto-kit-pro 1.0.0, 1.0.1
MAL-2026-3375 kam193 2 IOCs

May 8, 2026
PyPI
solana-wallet-sdk 1.0.0
MAL-2026-3376 kam193 2 IOCs

May 8, 2026
PyPI
ninja-core-utils 1.2.1
MAL-2026-3372 kam193 2 IOCs

May 7, 2026
PyPI
pycacheopt 0.2.1, 0.2.2, 0.2.3, 0.2.4, 0.2.5, 0.2.6, 0.2.7
MAL-2026-3371 kam193

May 7, 2026
PyPI
sufiagent 1.0.0, 1.0.1, 1.0.2
MAL-2026-3370 kam193, reversing-labs 3 IOCs

May 7, 2026
PyPI
dabrius 0.1.0, 0.1.1, 0.1.2, 0.1.3, 0.2.0, 0.2.1, 0.2.2, 0.2.3, 0.2.4, 0.3.0, 0.3.1, 0.…
MAL-2026-3369 kam193

May 7, 2026
PyPI
crayrandomiz 1.0.0, 1.0.1, 2.0.0
MAL-2026-3367 kam193

May 7, 2026
PyPI
yc-depconf-test-807dff 99.0.0, 99.0.1
MAL-2026-3368 kam193

May 7, 2026
PyPI
runtime-vitals 0.3.0, 0.3.1
MAL-2026-3366 kam193

May 7, 2026
PyPI
quicklytookerv 1.0.0, 1.0.1
MAL-2026-3364 kam193

May 7, 2026
PyPI
test-py-conn 0.0.1, 0.0.2
MAL-2026-3356 kam193 4 IOCs

May 6, 2026
PyPI
playwright-atoned 0.1.0, 1.1.0, 1.2.0, 1.3.0
MAL-2026-3355 kam193 3 IOCs

May 6, 2026
PyPI
playwright-acustomed 0.1.0
MAL-2026-3354 kam193 3 IOCs

May 6, 2026
PyPI
gemini-analyzer 0.1.0, 1.0.8, 1.0.9
MAL-2026-3347 kam193 1 IOC

May 5, 2026
PyPI
runtime-probe 0.3.0
MAL-2026-3341 kam193

May 5, 2026
PyPI
runtime-readout 0.3.0
MAL-2026-3342 kam193

May 5, 2026
PyPI
rogiant-quick-install 2.4.0
MAL-2026-3333 kam193 20 IOCs

May 4, 2026
PyPI
rogiant 2.4.0
MAL-2026-3332 kam193 20 IOCs

May 4, 2026
PyPI
cloudauth-sdk 0.1.0
MAL-2026-3325 kam193

May 4, 2026
PyPI
randomchoicemas 1.0.0, 1.0.1
MAL-2026-3324 kam193

May 4, 2026
PyPI
gauth-client 0.1.0
MAL-2026-3252 kam193

May 3, 2026
PyPI
puan31 0.1.0, 0.1.1
MAL-2026-3251 kam193 1 IOC

May 3, 2026