Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,159 npm 223,989 PyPI 12,020 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,020 reports · Feed

PyPI
lightning 2.6.2, 2.6.3
MAL-2026-3201 kam193

Apr 30, 2026
PyPI
timecurrently 0.1.0
MAL-2026-3198 kam193 3 IOCs

Apr 30, 2026
PyPI
sdoihgio9sudghsiudbg 0.1.0
MAL-2026-3197 kam193 3 IOCs

Apr 30, 2026
PyPI
robase-dnb 2.4.0
MAL-2026-3194 kam193 19 IOCs

Apr 30, 2026
PyPI
rblx-http 2.4.0
MAL-2026-3193 kam193 19 IOCs

Apr 29, 2026
PyPI
rblx-https 2.4.0
MAL-2026-3191 kam193 19 IOCs

Apr 29, 2026
PyPI
ro-db 2.4.0
MAL-2026-3192 kam193 19 IOCs

Apr 29, 2026
PyPI
bbranger 999.0.0.dev0
MAL-2026-3175 kam193

Apr 29, 2026
PyPI
amazon-boto 1.42.41, 1.42.42
MAL-2026-3148 kam193 4 IOCs

Apr 29, 2026
PyPI
timenow-py 0.1.0
MAL-2026-3146 kam193 3 IOCs

Apr 29, 2026
PyPI
timenow 0.1.0
MAL-2026-3145 kam193 3 IOCs

Apr 29, 2026
PyPI
timemcp-utils 0.1.0
MAL-2026-3143 kam193 3 IOCs

Apr 29, 2026
PyPI
timemcp190825790125120985125 0.1.0
MAL-2026-3144 kam193 3 IOCs

Apr 29, 2026
PyPI
timemcp-client 0.1.0
MAL-2026-3142 kam193 3 IOCs

Apr 29, 2026
PyPI
coinmate-api 1.1.0
MAL-2026-3141 kam193

Apr 29, 2026
PyPI
core-roblox-utils 2.4.0
MAL-2026-3137 kam193 18 IOCs

Apr 28, 2026
PyPI
robase-start 2.4.0
MAL-2026-3139 kam193 18 IOCs

Apr 28, 2026
PyPI
robase-apis 2.4.0
MAL-2026-3138 kam193 18 IOCs

Apr 28, 2026
PyPI
sf-th-requests 0.1.0, 0.2.0
MAL-2026-3135 kam193 2 IOCs

Apr 28, 2026
PyPI
timestamp-py 0.1.0
MAL-2026-3136 kam193 3 IOCs

Apr 28, 2026
PyPI
timemcp-py 0.1.0
MAL-2026-3134 kam193 3 IOCs

Apr 28, 2026
PyPI
fetchapi-syncdata-pypi 0.1.0
MAL-2026-3133 kam193 3 IOCs

Apr 28, 2026
PyPI
timemcp 0.1.0
MAL-2026-3132 kam193 3 IOCs

Apr 28, 2026
PyPI
kcvlib 1.0.0, 1.0.1, 1.1.0, 1.2.0, 1.2.1, 1.3.0, 1.4.0
MAL-2026-3131 kam193 1 IOC

Apr 28, 2026
PyPI
genmedia-izumi-agent 0.0.0, 0.0.1
MAL-2026-3130 kam193

Apr 28, 2026
PyPI
coloreasyprint 0.4.7.dev1, 0.4.7.dev2, 0.4.7.dev3
MAL-2026-3127 kam193 3 IOCs

Apr 28, 2026
PyPI
mypypipkg 0.1.0, 0.1.1
MAL-2026-3105 kam193

Apr 27, 2026
PyPI
robase-ui 2.3.0
MAL-2026-3104 kam193 17 IOCs

Apr 27, 2026
PyPI
fetch-data-api-syncapi 0.1.0, 0.1.1, 0.1.2
MAL-2026-3100 kam193 2 IOCs

Apr 27, 2026
PyPI
bytedaaa 99.9.9
MAL-2026-3085 kam193

Apr 27, 2026
PyPI
bytedecs 99.9.9
MAL-2026-3090 kam193

Apr 27, 2026
PyPI
bytedvke 99.9.9
MAL-2026-3098 kam193

Apr 27, 2026
PyPI
bytedark 99.9.9
MAL-2026-3087 kam193

Apr 27, 2026
PyPI
bytedai 99.9.9
MAL-2026-3086 kam193

Apr 27, 2026
PyPI
bytedmlp 99.9.9
MAL-2026-3093 kam193

Apr 27, 2026
PyPI
bytedvefaas 99.9.9
MAL-2026-3097 kam193

Apr 27, 2026
PyPI
bytedfaas 99.9.9
MAL-2026-3091 kam193

Apr 27, 2026
PyPI
bytedclaw 99.9.9
MAL-2026-3089 kam193

Apr 27, 2026
PyPI
byteclaw 99.9.9
MAL-2026-3084 kam193

Apr 27, 2026
PyPI
bytedvod 99.9.9
MAL-2026-3099 kam193

Apr 27, 2026