Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,159 npm 223,989 PyPI 12,020 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,020 reports · Feed

  • PyPI
    bpsm 99.0.0
    MAL-2026-1296 kam193
  • PyPI
    causal-canvas 99.0.0
    MAL-2026-1294 ossf-package-analysis, kam193
  • PyPI
    tabformerlite 99.0.0
    MAL-2026-1295 ossf-package-analysis, kam193
  • PyPI
    requests-lite 2.32.3, 2.32.4, 2.32.5, 2.32.7
    MAL-2026-1291 kam193
  • PyPI
    remjsonparse 0.1.0, 0.1.1, 0.1.2, 0.1.3, 0.1.4, 0.1.6, 0.1.7
    MAL-2026-1290 kam193 2 IOCs
  • PyPI
    aioutil3 3.9.1
    MAL-2026-1289 kam193 2 IOCs
  • PyPI
    arnavtest123 1.0.1
    MAL-2026-1288 kam193 2 IOCs
  • PyPI
    simple-text-parser 0.24.2
    MAL-2026-1287 kam193
  • PyPI
    demozecosse 2.0.1
    MAL-2026-1286 kam193
  • PyPI
    demozecob 2.0.1
    MAL-2026-1283 kam193
  • PyPI
    demozecox 0.0.0
    MAL-2026-1285 kam193
  • PyPI
    demozecosso 2.0.1
    MAL-2026-1284 kam193
  • PyPI
    xmrig-miner 1.0.0
    MAL-2026-1282 kam193
  • PyPI
    py-sysbench 1.0.0
    MAL-2026-1280 kam193
  • PyPI
    cpucheck 1.0.0, 1.1.0, 1.2.0
    MAL-2026-1279 kam193
  • PyPI
    pyutils-helper 1.2.3, 1.2.4
    MAL-2026-1281 kam193
  • PyPI
    chat-xdk 0.0.0, 1.0.0
    MAL-2026-1278 kam193
  • PyPI
    prateek-yadav23 0.0.0
    MAL-2026-1277 kam193
  • PyPI
    flowfix 0.1.0, 0.1.1
    MAL-2026-1276 kam193 2 IOCs
  • PyPI
    hostlists-plugins-default 0.0.0, 1.0.0
    MAL-2026-1275 kam193
  • PyPI
    python-requirements 3.15.5, 3.15.6
    MAL-2026-1264 kam193
  • PyPI
    python-module-installer 3.15.6, 3.15.7, 3.15.8, 3.15.9, 3.15.10
    MAL-2026-1263 kam193
  • PyPI
    fastapi-requests 0.0.0, 2.32.5
    MAL-2026-1261 kam193 1 IOC
  • PyPI
    fastapis-requests 2.32.5
    MAL-2026-1262 kam193 1 IOC
  • PyPI
    requests-ml-min 3.45
    MAL-2026-1240 kam193 5 IOCs
  • PyPI
    dakhara 0.0.1, 0.0.2, 0.0.3, 0.0.4
    MAL-2026-1235 kam193 1 IOC
  • PyPI
    qwery-core 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5, 1.0.6, 1.0.7
    MAL-2026-1226 kam193 1 IOC
  • PyPI
    spark-ml-utilities 1.0.0, 1.0.1
    MAL-2026-1224 kam193 5 IOCs
  • PyPI
    risk-utilities 6.0.0, 6.0.1
    MAL-2026-1223 kam193 5 IOCs
  • PyPI
    optimal-spark-config 14.0.0, 14.0.1, 14.0.2, 14.0.3
    MAL-2026-1222 kam193 5 IOCs
  • PyPI
    urllib-slim 9.31, 9.32, 9.33, 9.34, 9.35, 9.36
    MAL-2026-1225 kam193 5 IOCs
  • PyPI
    roku-aihub 0.3.1
    MAL-2026-1144 kam193
  • PyPI
    amigapythonupdater 3.1.0, 3.1.1
    MAL-2026-1136 kam193, reversing-labs 1 IOC
  • PyPI
    wisecloudcyberark 1.4.0
    MAL-2026-1142 kam193, reversing-labs 1 IOC
  • PyPI
    heimdal-credentials 2.1.0
    MAL-2026-1140 kam193, reversing-labs 1 IOC
  • PyPI
    wisecloudsecrets 1.4.0
    MAL-2026-1143 kam193, reversing-labs 1 IOC
  • PyPI
    fwk-amigapython 2.13.0
    MAL-2026-1137 kam193, reversing-labs 1 IOC
  • PyPI
    fwk-amigapython-amigamlserver 2.13.0
    MAL-2026-1138 kam193, reversing-labs 1 IOC
  • PyPI
    fwk-amigapython-rest-server 2.13.0
    MAL-2026-1139 kam193, reversing-labs 1 IOC
  • PyPI
    identityapi 3.0.0
    MAL-2026-1141 kam193, reversing-labs 1 IOC