Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,159 npm 223,989 PyPI 12,020 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,020 reports · Feed

PyPI
mangrove-sdk 0.2.0
MAL-2026-2006 kam193

Mar 20, 2026
PyPI
efghr-honeybee-sdk 0.1.0, 0.2.0
MAL-2026-2005 kam193

Mar 20, 2026
PyPI
flyio-token-client-efgh 0.1.0
MAL-2026-2004 kam193

Mar 20, 2026
PyPI
tui-ascii-art 0.1.0, 0.1.1
MAL-2026-2117 kam193 2 IOCs

Mar 20, 2026
PyPI
indpack 0.1.0
MAL-2026-2114 kam193 2 IOCs

Mar 20, 2026
PyPI
reqpack 0.1.0
MAL-2026-2116 kam193 2 IOCs

Mar 20, 2026
PyPI
gcpipwrap 0.1.2, 0.1.3, 0.1.5, 0.1.6, 0.1.7, 0.1.8, 0.1.9
MAL-2026-2113 kam193 2 IOCs

Mar 20, 2026
PyPI
nspack 0.1.0, 0.1.2, 0.1.3, 0.1.4, 0.1.5, 0.1.6, 0.1.8, 0.1.9
MAL-2026-2115 kam193 2 IOCs

Mar 20, 2026
PyPI
cfgmgr-sync 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5, 1.0.6, 1.0.7, 1.0.8, 1.0.9
MAL-2026-2000 kam193 2 IOCs

Mar 20, 2026
PyPI
cfgmgr-syn 1.0.26, 1.0.27
MAL-2026-1999 kam193 2 IOCs

Mar 20, 2026
PyPI
init2winit 9.9.9
MAL-2026-1989 kam193

Mar 20, 2026
PyPI
airio 9.9.9
MAL-2026-1984 kam193

Mar 20, 2026
PyPI
nsscache 9.9.9
MAL-2026-1991 kam193

Mar 20, 2026
PyPI
spatialmedia 9.9.9
MAL-2026-1994 kam193

Mar 20, 2026
PyPI
pubsub2inbox 9.9.9
MAL-2026-1993 kam193

Mar 20, 2026
PyPI
perfkitbenchmarker 9.9.9
MAL-2026-1992 kam193

Mar 20, 2026
PyPI
composer-dev 9.9.9
MAL-2026-1987 kam193

Mar 20, 2026
PyPI
dataflux-pytorch 9.9.9
MAL-2026-1988 kam193

Mar 20, 2026
PyPI
mcp-transport-proto 9.9.9
MAL-2026-1990 kam193

Mar 20, 2026
PyPI
cloud-datasets 9.9.9
MAL-2026-1986 kam193

Mar 20, 2026
PyPI
azure-eventhub-checkpointstoretable 9.9.9
MAL-2026-1985 kam193

Mar 20, 2026
PyPI
libavcodec-extra 99.99.9
MAL-2026-1933 kam193

Mar 19, 2026
PyPI
ropie 1.0.0
MAL-2026-1577 kam193 1 IOC

Mar 18, 2026
PyPI
tabullate 1.0.1
MAL-2026-1914 reversing-labs

Mar 18, 2026
PyPI
suficloud 3.0.0
MAL-2026-1913 reversing-labs

Mar 18, 2026
PyPI
quantumania 0.0.3
MAL-2026-1912 reversing-labs

Mar 18, 2026
PyPI
prometheus-quicker-analysis 0.1.0
MAL-2026-1911 reversing-labs

Mar 18, 2026
PyPI
prometheus-quick-analysis 0.1.0
MAL-2026-1910 reversing-labs

Mar 18, 2026
PyPI
prometheus-fast-analysis 0.1.23
MAL-2026-1909 reversing-labs

Mar 18, 2026
PyPI
prometheus-analysis-1 0.1.3
MAL-2026-1908 reversing-labs

Mar 18, 2026
PyPI
prometheus-analysis 0.1.0, 0.1.1, 0.1.2
MAL-2026-1907 reversing-labs

Mar 18, 2026
PyPI
loveclose2 0.0.1
MAL-2026-1906 reversing-labs

Mar 18, 2026
PyPI
loveclose1 0.0.4, 0.0.5, 0.0.6, 0.0.7, 0.0.8, 0.0.9
MAL-2026-1905 reversing-labs

Mar 18, 2026
PyPI
loveclose 0.0.1, 0.0.2, 0.0.4, 0.0.5, 0.0.6
MAL-2026-1904 reversing-labs

Mar 18, 2026
PyPI
loveahmedclose 0.0.1, 0.0.2, 0.0.3, 0.0.4, 0.0.5, 0.0.6, 0.0.7, 0.0.8, 0.0.9, 0.0.10
MAL-2026-1903 reversing-labs

Mar 18, 2026
PyPI
helloharry123t-package 0.1.0
MAL-2026-1902 reversing-labs

Mar 18, 2026
PyPI
ethical-demo-liviy 0.1.0
MAL-2026-1901 reversing-labs

Mar 18, 2026
PyPI
elleuchdhsolvepwn 1.0.0
MAL-2026-1900 reversing-labs

Mar 18, 2026
PyPI
discordrlbypasser 1.9.7, 1.9.9, 2.0.0, 2.1.0
MAL-2026-1899 reversing-labs

Mar 18, 2026
PyPI
curl-requester 0.1.0
MAL-2026-1898 reversing-labs

Mar 18, 2026