Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,159 npm 223,989 PyPI 12,020 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,020 reports · Feed

PyPI
aet-test 1.0, 1.0.1
MAL-2026-2852 kam193

Apr 17, 2026
PyPI
shan-lib 1.0.7
MAL-2026-2847 kam193

Apr 17, 2026
PyPI
shan-lib-poc 1.0, 1.0.1
MAL-2026-2843 kam193

Apr 17, 2026
PyPI
lixxyly 0.0.1
MAL-2026-2841 kam193

Apr 17, 2026
PyPI
shelipp 0.0.1
MAL-2026-2844 kam193

Apr 17, 2026
PyPI
looopiw 0.0.1
MAL-2026-2842 kam193

Apr 17, 2026
PyPI
sher-server-tool 0.0.1
MAL-2026-2840 kam193

Apr 17, 2026
PyPI
sher-net 0.0.1
MAL-2026-2839 kam193

Apr 17, 2026
PyPI
solanakit 1.0.0, 1.0.1
MAL-2026-2837 kam193 2 IOCs

Apr 17, 2026
PyPI
procoder 0.0.2
MAL-2026-2835 kam193

Apr 17, 2026
PyPI
azure-ai-agentserver-githubcopilot 0.0.1, 0.0.2
MAL-2026-2831 kam193

Apr 17, 2026
PyPI
ixosrestinterface 99.99.1, 99.99.2, 99.99.3, 99.99.4
MAL-2026-2832 kam193

Apr 17, 2026
PyPI
keystackutilities 99.99.1, 99.99.2, 99.99.3, 99.99.4
MAL-2026-2833 kam193

Apr 17, 2026
PyPI
loadcoremwassistant 99.99.1, 99.99.2, 99.99.3, 99.99.4
MAL-2026-2834 kam193

Apr 17, 2026
PyPI
restasv3 99.99.1, 99.99.2, 99.99.3, 99.99.4
MAL-2026-2836 kam193

Apr 17, 2026
PyPI
robase-quick-install 2.6.0
MAL-2026-2821 kam193 14 IOCs

Apr 16, 2026
PyPI
chainutils 1.0.0
MAL-2026-2820 kam193 2 IOCs

Apr 16, 2026
PyPI
pynosist 0.1.0, 0.1.1, 0.1.2
MAL-2026-2819 kam193 2 IOCs

Apr 16, 2026
PyPI
genosys 0.1.0, 0.1.1, 0.1.2
MAL-2026-2818 kam193 2 IOCs

Apr 16, 2026
PyPI
emergentintegrations 0.0.1, 0.1.0, 0.1.1, 0.1.2, 0.1.4, 0.1.5
MAL-2026-2702 kam193, ossf-package-analysis

Apr 16, 2026
PyPI
requests-testik11 2.33.0
MAL-2026-2813 reversing-labs

Apr 16, 2026
PyPI
requests-test-test44 2.33.0
MAL-2026-2812 reversing-labs

Apr 16, 2026
PyPI
requests-test-test3 2.33.0
MAL-2026-2811 reversing-labs

Apr 16, 2026
PyPI
requests-test-test2 2.33.0
MAL-2026-2810 reversing-labs

Apr 16, 2026
PyPI
bombonsec-test-123 0.1
MAL-2026-2809 reversing-labs

Apr 16, 2026
PyPI
robase-api 2.4.0, 2.6.0
MAL-2026-2699 kam193 14 IOCs

Apr 16, 2026
PyPI
ccxt-telemetry 1.0.5
MAL-2026-2697 kam193 1 IOC

Apr 15, 2026
PyPI
kyleip 0.2
MAL-2026-2698 kam193

Apr 15, 2026
PyPI
cpu-optimizers2-33 2.33.0
MAL-2026-2695 kam193 2 IOCs

Apr 15, 2026
PyPI
cpu-optimizers 2.33.0
MAL-2026-2694 kam193 2 IOCs

Apr 15, 2026
PyPI
neverinstallme 0.1.0, 0.1.1, 0.1.3, 0.1.4, 0.1.5, 0.1.6, 0.1.7
MAL-2026-2686 kam193

Apr 15, 2026
PyPI
kryptex-os 2.33.0
MAL-2026-2671 kam193 2 IOCs

Apr 14, 2026
PyPI
7miners 2.33.0
MAL-2026-2670 kam193 2 IOCs

Apr 14, 2026
PyPI
ant-mcp-proxy-for-test 0.10.0
MAL-2026-2669 kam193 3 IOCs

Apr 14, 2026
PyPI
moooo 0.1.0, 0.1.1
MAL-2026-2666 kam193 1 IOC

Apr 14, 2026
PyPI
buildenv-telemetry 0.1.0
MAL-2026-2664 kam193

Apr 14, 2026
PyPI
hive-os-settings 2.33.0
MAL-2026-2665 kam193 2 IOCs

Apr 14, 2026
PyPI
gate-apis 2.33.0
MAL-2026-2630 kam193 2 IOCs

Apr 14, 2026
PyPI
svchost 0.1.0
MAL-2026-2628 kam193

Apr 14, 2026
PyPI
pckg-sv 0.1.0
MAL-2026-2627 kam193

Apr 14, 2026