Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,159 npm 223,989 PyPI 12,020 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,020 reports · Feed

PyPI
bigmathutils 0.0.1, 0.0.2, 0.0.3
MAL-2026-1897 reversing-labs

Mar 18, 2026
PyPI
bigmathix 0.0.1, 1.0.0, 1.0.1
MAL-2026-1896 reversing-labs

Mar 18, 2026
PyPI
bigmathex 0.0.1, 0.0.2, 0.0.3
MAL-2026-1895 reversing-labs

Mar 18, 2026
PyPI
async-substrate-interface-sub 1.5.156, 1.5.157
MAL-2026-1894 reversing-labs

Mar 18, 2026
PyPI
aitrade 0.1.2, 0.1.3
MAL-2026-1893 reversing-labs

Mar 18, 2026
PyPI
rowrap 1.0.0, 1.0.1, 1.0.2, 1.0.4, 1.0.8, 1.0.9, 1.1.0, 1.1.1, 1.1.2, 1.1.3, 1.1.5, 1.…
MAL-2026-1544 kam193 2 IOCs

Mar 18, 2026
PyPI
aniresolve 0.0.1
MAL-2026-1543 kam193 1 IOC

Mar 18, 2026
PyPI
anistream 0.0.1, 0.0.2, 0.0.3, 0.0.4
MAL-2026-1499 kam193 1 IOC

Mar 17, 2026
PyPI
telegramdatas 0.1.0
MAL-2026-1498 kam193 2 IOCs

Mar 17, 2026
PyPI
robloxapi-test 1.0.0
MAL-2026-1497 kam193 1 IOC

Mar 17, 2026
PyPI
robloxapi-testy 1.0.0
MAL-2026-1496 kam193 1 IOC

Mar 17, 2026
PyPI
chacha-lite-encrypt 4.2.0
MAL-2026-1482 kam193

Mar 16, 2026
PyPI
pretty-tabulate 2.37.1, 2.37.2
MAL-2026-1480 kam193

Mar 16, 2026
PyPI
color-list 1.0.1, 1.0.2
MAL-2026-1479 kam193

Mar 16, 2026
PyPI
codeshouhu 0.1.3, 0.1.4, 0.1.5, 0.1.6, 0.1.7, 0.1.8, 0.1.9, 0.2.0, 0.2.1, 0.2.2
MAL-2026-1488 oracle-using-macaron

Mar 16, 2026
PyPI
pymnemonic 1.1.2, 1.1.3, 1.2.5
MAL-2026-1438 kam193 2 IOCs

Mar 15, 2026
PyPI
do-not-install-this-package-004 0.1.0
MAL-2026-1436 kam193 3 IOCs

Mar 15, 2026
PyPI
flowpeek 0.1.1
MAL-2026-1437 kam193 2 IOCs

Mar 15, 2026
PyPI
kvstore-pb2-grpc 16.0.0
MAL-2026-1433 kam193

Mar 15, 2026
PyPI
dgl-cu117 14.6.0, 16.0.0
MAL-2026-1432 kam193

Mar 15, 2026
PyPI
python-anchor 13.3.0, 14.6.0, 15.0.0
MAL-2026-1435 kam193

Mar 15, 2026
PyPI
my-super-lib 0.3.0, 0.4.0, 0.6.0, 14.6.0
MAL-2026-1434 kam193

Mar 15, 2026
PyPI
ariadne-federation 1.0.0
MAL-2026-1431 kam193

Mar 15, 2026
PyPI
fastapi-middleware-cors 1.0.0
MAL-2026-1422 kam193

Mar 13, 2026
PyPI
project47 1.0
MAL-2026-1412 kam193 1 IOC

Mar 13, 2026
PyPI
darkig 1.0, 2.0
MAL-2026-1409 kam193 1 IOC

Mar 13, 2026
PyPI
ighack 3.0
MAL-2026-1410 kam193 1 IOC

Mar 13, 2026
PyPI
nfd 1.0
MAL-2026-1411 kam193 1 IOC

Mar 13, 2026
PyPI
nai 1.4, 1.5, 1.6, 1.7, 1.8, 1.9, 2.0, 2.1, 2.2, 2.3, 2.4, 2.5, 2.8, 2.9, 3.0, 3.1
MAL-2026-1408 kam193 1 IOC

Mar 13, 2026
PyPI
thief-utils 1.2.6, 1.2.7
MAL-2026-1407 kam193, reversing-labs

Mar 13, 2026
PyPI
makenotion-ppetest 0.0.0, 1.0.0
MAL-2026-1406 kam193, reversing-labs

Mar 13, 2026
PyPI
collecters 1.0.1
MAL-2026-1371 kam193 9 IOCs

Mar 12, 2026
PyPI
faaladorcli 99.0.1
MAL-2026-1351 kam193

Mar 11, 2026
PyPI
falador 99.0.1
MAL-2026-1350 kam193

Mar 11, 2026
PyPI
collectables 1.0.3
MAL-2026-1342 kam193 9 IOCs

Mar 11, 2026
PyPI
collects 1.0.1, 1.0.2, 1.0.3
MAL-2026-1341 kam193 9 IOCs

Mar 11, 2026
PyPI
anontest123 1.0.1
MAL-2026-1339 kam193 1 IOC

Mar 11, 2026
PyPI
safetest123 1.0.1
MAL-2026-1340 kam193 1 IOC

Mar 11, 2026
PyPI
synapseml-utils 0.1.0, 0.1.1, 0.1.2, 0.1.3, 0.1.4, 0.1.5
MAL-2026-1325 kam193 1 IOC

Mar 10, 2026
PyPI
hxq-misc-utils-0379 2026.310.1, 2026.313.1, 2026.314.1, 2026.315.1, 2026.315.2
MAL-2026-1453 oracle-using-macaron

Mar 9, 2026