Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,159 npm 223,989 PyPI 12,020 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,020 reports · Feed

PyPI
robase-install 2.1.0
MAL-2026-2625 kam193 12 IOCs

Apr 13, 2026
PyPI
asciitoart 0.1.1, 0.1.2, 0.1.3, 0.1.4
MAL-2026-2624 kam193 3 IOCs

Apr 13, 2026
PyPI
hive-setting 2.33.0
MAL-2026-2623 kam193 2 IOCs

Apr 13, 2026
PyPI
hiveos-setting 2.33.0
MAL-2026-2572 kam193 2 IOCs

Apr 13, 2026
PyPI
hiveos-settings 2.33.0
MAL-2026-2571 kam193 2 IOCs

Apr 13, 2026
PyPI
bloxy-api 3.4.0
MAL-2026-2569 kam193 12 IOCs

Apr 12, 2026
PyPI
robase-app 2.1.0, 3.4.0
MAL-2026-2570 kam193 12 IOCs

Apr 12, 2026
PyPI
robase-fallback 2.2.0, 2.4.0
MAL-2026-2562 kam193 11 IOCs

Apr 11, 2026
PyPI
robase-installer 2.2.0
MAL-2026-2563 kam193 11 IOCs

Apr 11, 2026
PyPI
robase-help 0.0.9
MAL-2026-2561 kam193 11 IOCs

Apr 11, 2026
PyPI
databasesupalake 1.2.0
MAL-2026-2559 kam193 11 IOCs

Apr 11, 2026
PyPI
api-analysis 0.0.8
MAL-2026-2556 kam193 11 IOCs

Apr 11, 2026
PyPI
robase-utils 2.3.0
MAL-2026-2558 kam193 11 IOCs

Apr 11, 2026
PyPI
databasesupasafe 1.0.0, 1.2.0
MAL-2026-2557 kam193 11 IOCs

Apr 11, 2026
PyPI
api-feature 0.0.8
MAL-2026-2555 kam193 11 IOCs

Apr 11, 2026
PyPI
ixosmonitoring 99.0.0
MAL-2026-2547 kam193, ossf-package-analysis

Apr 11, 2026
PyPI
ks-hex2pcap 99.0.0
MAL-2026-2548 kam193, ossf-package-analysis

Apr 11, 2026
PyPI
python-aickerso 99.0.0
MAL-2026-2549 kam193, ossf-package-analysis

Apr 11, 2026
PyPI
hex2pcap 99.0.0
MAL-2026-2546 ossf-package-analysis, kam193

Apr 11, 2026
PyPI
roboat-utilities 2.1.0
MAL-2026-2544 kam193 11 IOCs

Apr 10, 2026
PyPI
robase 2.1.0, 2.2.0
MAL-2026-2543 kam193 11 IOCs

Apr 10, 2026
PyPI
databasetrace 0.0.5, 0.0.6, 0.0.7
MAL-2026-2542 kam193 11 IOCs

Apr 10, 2026
PyPI
bogus-nydus-op 99.0.0
MAL-2026-2538 kam193

Apr 10, 2026
PyPI
gd-auth 99.0.0
MAL-2026-2540 kam193

Apr 10, 2026
PyPI
gd-auth-sso 99.0.0
MAL-2026-2541 kam193

Apr 10, 2026
PyPI
customer-local-ops 99.0.0
MAL-2026-2539 kam193

Apr 10, 2026
PyPI
emd-ext 0.0.1
MAL-2026-2532 kam193

Apr 10, 2026
PyPI
yhaplo1 0.0.1
MAL-2026-2536 kam193

Apr 10, 2026
PyPI
bonsaitree1 0.0.1
MAL-2026-2531 kam193

Apr 10, 2026
PyPI
siempyl-sumo 0.0.1
MAL-2026-2534 kam193

Apr 10, 2026
PyPI
ttam 0.0.1
MAL-2026-2535 kam193

Apr 10, 2026
PyPI
phasedibd 0.0.1
MAL-2026-2533 kam193

Apr 10, 2026
PyPI
noonhelpers 99.1.0
MAL-2026-2530 kam193

Apr 10, 2026
PyPI
st-payment 99.0.0
MAL-2026-2522 kam193

Apr 9, 2026
PyPI
gc-grocery-api 99.0.0
MAL-2026-2521 kam193

Apr 9, 2026
PyPI
just4testlm 0.1.0, 0.2.0, 0.3.0, 0.4.0, 0.5.0, 0.6.0, 0.7.0, 0.8.0, 0.9.0, 0.9.1, 0.9.2, 0.…
MAL-2026-2519 kam193 4 IOCs

Apr 9, 2026
PyPI
kraken-trader 1.0.0, 1.0.1
MAL-2026-2517 kam193 2 IOCs

Apr 8, 2026
PyPI
sentinel-tool 0.1, 0.2, 0.3, 0.4, 0.5, 0.6
MAL-2026-2516 kam193 1 IOC

Apr 8, 2026
PyPI
granulate-utils 9.9.9
MAL-2026-2515 kam193

Apr 8, 2026
PyPI
gprofiler-logging 9.9.9
MAL-2026-2514 kam193

Apr 8, 2026