Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 240,432 npm 223,271 PyPI 12,012 RubyGems 4,319 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,012 reports · Feed

PyPI
netweavex 1.1.0, 1.1.1, 1.1.2
MAL-2026-18328 kam193, amazon-inspector 2 IOCs

Oct 26, 2026
PyPI
zagents-framework 6.25.30.10b5, 99.25.30.10b5
MAL-2026-18327 kam193

Oct 26, 2026
PyPI
changes-lxc-wrapper 0.0.0, 0.1.0
MAL-2026-18326 kam193, amazon-inspector

Oct 26, 2026
PyPI
dictmerge-lite 1.0.0
MAL-2026-18301 kam193 3 IOCs

Oct 26, 2026
PyPI
claudeopuseni 0.1.0, 0.1.1
MAL-2026-18299 kam193, amazon-inspector 7 IOCs

Oct 25, 2026
PyPI
claudeopusenifile 0.1.3
MAL-2026-18300 kam193 7 IOCs

Oct 25, 2026
PyPI
claudeopusfile 0.1.1, 0.1.2
MAL-2026-18298 kam193, amazon-inspector 7 IOCs

Oct 25, 2026
PyPI
nebulallm 1.4.3
MAL-2026-18297 kam193, amazon-inspector 4 IOCs

Oct 25, 2026
PyPI
zagents-message-bus 1.0.5, 1.0.10, 99.99.99, 99.99.100
MAL-2026-18296 kam193, amazon-inspector

Oct 25, 2026
PyPI
fontus 0.0.1, 0.0.2, 0.0.3
MAL-2026-18271 kam193, amazon-inspector 3 IOCs

Oct 25, 2026
PyPI
sitecard 0.1.0, 0.1.1, 0.1.2, 0.1.3, 0.1.6, 0.1.7, 0.1.8, 0.1.9, 0.1.10, 0.1.11, 0.1.12,…
MAL-2026-18242 kam193, amazon-inspector

Oct 23, 2026
PyPI
jobwharf 0.1.0
MAL-2026-18228 kam193, amazon-inspector

Oct 23, 2026
PyPI
slatejob 0.1.0
MAL-2026-18237 kam193, amazon-inspector

Oct 23, 2026
PyPI
reedworker 0.1.0
MAL-2026-18234 kam193, amazon-inspector

Oct 23, 2026
PyPI
loadferry 0.1.0
MAL-2026-18231 kam193, amazon-inspector

Oct 23, 2026
PyPI
runpier 0.1.0
MAL-2026-18235 kam193, amazon-inspector

Oct 23, 2026
PyPI
sedgehaul 0.1.0
MAL-2026-18236 kam193, amazon-inspector

Oct 23, 2026
PyPI
taskquay 0.1.0
MAL-2026-18238 kam193, amazon-inspector

Oct 23, 2026
PyPI
marshrunner 0.1.0
MAL-2026-18232 kam193, amazon-inspector

Oct 23, 2026
PyPI
workslip 0.1.0
MAL-2026-18241 kam193, amazon-inspector

Oct 23, 2026
PyPI
brookworker 0.1.0
MAL-2026-18224 kam193, amazon-inspector

Oct 23, 2026
PyPI
cobbleload 0.1.0
MAL-2026-18225 kam193, amazon-inspector

Oct 23, 2026
PyPI
brambletask 0.1.0
MAL-2026-18223 kam193, amazon-inspector

Oct 23, 2026
PyPI
ferretqueue 0.1.0
MAL-2026-18226 kam193, amazon-inspector

Oct 23, 2026
PyPI
otterload 0.1.0
MAL-2026-18233 kam193, amazon-inspector

Oct 23, 2026
PyPI
badgertask 0.1.0
MAL-2026-18222 kam193, amazon-inspector

Oct 23, 2026
PyPI
larchworker 0.1.0
MAL-2026-18230 kam193

Oct 23, 2026
PyPI
thornqueue 0.1.0
MAL-2026-18240 kam193

Oct 23, 2026
PyPI
thistlerun 0.1.0
MAL-2026-18239 kam193

Oct 23, 2026
PyPI
juniperrun 0.1.0
MAL-2026-18229 kam193, amazon-inspector

Oct 23, 2026
PyPI
flintqueue 0.1.0
MAL-2026-18227 kam193, amazon-inspector

Oct 23, 2026
PyPI
kestreljob 0.1.0
MAL-2026-18221 kam193

Oct 23, 2026
PyPI
onsokets 0.1.0
MAL-2026-18219 kam193, amazon-inspector

Oct 23, 2026
PyPI
qowa 0.1.0
MAL-2026-18218 kam193, amazon-inspector

Oct 23, 2026
PyPI
journey-teste-shellhello 0.2.0
MAL-2026-18203 kam193 2 IOCs

Oct 22, 2026
PyPI
1h1 1.0.0
MAL-2026-18188 kam193 2 IOCs

Oct 22, 2026
PyPI
aanthropic 1.0.0
MAL-2026-18189 kam193 2 IOCs

Oct 22, 2026
PyPI
acoustichub 0.1.0
MAL-2026-18155 kam193, amazon-inspector

Oct 22, 2026
PyPI
phonemeprobe 0.1.0
MAL-2026-18164 kam193, amazon-inspector

Oct 22, 2026
PyPI
ttsflow 0.1.0
MAL-2026-18170 kam193, amazon-inspector

Oct 22, 2026