Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,159 npm 223,989 PyPI 12,020 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,020 reports · Feed

  • PyPI
    rostilesolver 2.4.0
    MAL-2026-3250 kam193 20 IOCs
  • PyPI
    pwn-control 1.0
    MAL-2026-3248 kam193, reversing-labs
  • PyPI
    metoopro 1.0.2
    MAL-2026-3247 kam193 2 IOCs
  • PyPI
    win-update-helper-tool-v2 1.0.0
    MAL-2026-3246 kam193
  • PyPI
    system-update-tool 1.0.0
    MAL-2026-3245 kam193
  • PyPI
    puan4 1.0.3
    MAL-2026-3244 kam193 1 IOC
  • PyPI
    puan3 0.1.0, 0.1.1
    MAL-2026-3243 kam193 1 IOC
  • PyPI
    sf-vmeval-requests 0.2.0
    MAL-2026-3242 kam193 4 IOCs
  • PyPI
    timesmcplib 1.0.0
    MAL-2026-3240 kam193 3 IOCs
  • PyPI
    timermcplib 1.0.0
    MAL-2026-3239 kam193 3 IOCs
  • PyPI
    timemcplib 1.0.0
    MAL-2026-3238 kam193 3 IOCs
  • PyPI
    protocol-stub-generator 999.0.0, 999.0.1
    MAL-2026-3237 kam193
  • PyPI
    aocl-sparse-v3 2.1.8, 2.1.9, 2.3.0
    MAL-2026-3236 kam193
  • PyPI
    apexomni-client 99.99.99
    MAL-2026-3235 kam193
  • PyPI
    currenttimerlib 1.0.0
    MAL-2026-3229 kam193 3 IOCs
  • PyPI
    currenttimerpy 1.0.0
    MAL-2026-3230 kam193 3 IOCs
  • PyPI
    timermcp 1.0.0
    MAL-2026-3231 kam193 3 IOCs
  • PyPI
    as89ufnaisufn 1.0.0
    MAL-2026-3225 kam193 3 IOCs
  • PyPI
    timingmcp 0.1.5
    MAL-2026-3227 kam193 3 IOCs
  • PyPI
    timesmcp 1.0.0
    MAL-2026-3226 kam193 3 IOCs
  • PyPI
    ziugxfbvo 0.1.5
    MAL-2026-3228 kam193 3 IOCs
  • PyPI
    graphicctx 1.0.1
    MAL-2026-3224 kam193 4 IOCs
  • PyPI
    oracle-lag-sniper 1.2.0
    MAL-2026-3223 kam193 2 IOCs
  • PyPI
    graphicsctxs 1.0.1
    MAL-2026-3222 kam193 4 IOCs
  • PyPI
    aocl-sparse-v2 100.0.0
    MAL-2026-3221 kam193
  • PyPI
    py-clob-clients 0.1.0, 0.1.1, 0.1.2, 0.1.4, 0.1.5, 0.1.7, 0.1.8
    MAL-2026-3220 kam193 2 IOCs
  • PyPI
    tns-py 1.0.0
    MAL-2026-3219 kam193 2 IOCs
  • PyPI
    aocl-sparse 99.0.0
    MAL-2026-3217 kam193
  • PyPI
    my-pipeline-watcher-poc 99999.99999.1
    MAL-2026-3218 kam193
  • PyPI
    httpx-utils 1.0.2
    MAL-2026-3216 kam193 5 IOCs
  • PyPI
    renderkitcore 0.1.0
    MAL-2026-3214 kam193 4 IOCs
  • PyPI
    funkratov-renderkit 0.1.0
    MAL-2026-3213 kam193 4 IOCs
  • PyPI
    chalk-fancy 0.0.0, 0.0.3, 1.0.3, 1.0.4, 1.0.5, 1.0.6, 1.0.7, 1.0.8, 1.0.9
    MAL-2026-3212 kam193 4 IOCs
  • PyPI
    pycryptcore 0.1.0, 0.1.1, 0.1.5, 0.2.5
    MAL-2026-3211 kam193
  • PyPI
    graphicsctxr 1.0.1, 1.0.2, 1.0.3, 1.0.4, 2.1.1, 2.2.1, 2.2.2, 2.2.3
    MAL-2026-3210 kam193 2 IOCs
  • PyPI
    bxiucnxcb 0.1.0
    MAL-2026-3208 kam193 3 IOCs
  • PyPI
    currentclock 0.1.0
    MAL-2026-3206 kam193 3 IOCs
  • PyPI
    renderctx 0.1.0, 0.1.1, 1.1.1, 1.1.2, 2.1.0, 2.1.1
    MAL-2026-3207 kam193 2 IOCs
  • PyPI
    doisomgcxog 0.1.0
    MAL-2026-3205 kam193 3 IOCs
  • PyPI
    buffparser 1.0.0
    MAL-2026-3203 kam193 2 IOCs