Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,159 npm 223,989 PyPI 12,020 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,020 reports · Feed

PyPI
pyclogger 0.1.0
MAL-2026-1099 kam193, reversing-labs

Mar 1, 2026
PyPI
noteasonfnsource 1.0.3
MAL-2026-1098 kam193

Mar 1, 2026
PyPI
botbooster 0.0.1, 0.0.2, 0.0.3
MAL-2026-1097 kam193

Mar 1, 2026
PyPI
jwrincident 1.0.0, 1.0.1
MAL-2026-1092 kam193, reversing-labs 1 IOC

Feb 28, 2026
PyPI
myproject-bola 1.0.0
MAL-2026-1091 kam193, reversing-labs

Feb 28, 2026
PyPI
isb 1.0.0, 1.2.1, 1.2.2
MAL-2026-1090 kam193, reversing-labs

Feb 28, 2026
PyPI
randomstringgen 0.1, 0.2, 0.3, 0.4
MAL-2026-1089 kam193

Feb 28, 2026
PyPI
bladebit 99.0.0
MAL-2026-1088 kam193

Feb 28, 2026
PyPI
tchap-bot 199.0.99
MAL-2026-1086 ossf-package-analysis, kam193, reversing-labs

Feb 28, 2026
PyPI
ctf-toolkit 0.1.0
MAL-2026-1085 kam193 2 IOCs

Feb 28, 2026
PyPI
socketxio 1.5, 1.6, 1.7, 1.8, 1.9, 2.0, 2.1, 2.2
MAL-2026-1084 kam193

Feb 28, 2026
PyPI
cdf-clients 0.0.1
MAL-2026-1082 kam193, reversing-labs

Feb 27, 2026
PyPI
hashtools32 1.0.0, 2.1.0
MAL-2026-1080 kam193, reversing-labs 1 IOC

Feb 27, 2026
PyPI
cicd-ppe-redteam-test02 1.0.0, 1.0.3, 1.0.2
MAL-2026-1064 ossf-package-analysis, kam193, reversing-labs

Feb 27, 2026
PyPI
cicd-ppe-redteam-test01 1.0.0
MAL-2026-1063 ossf-package-analysis, kam193, reversing-labs

Feb 27, 2026
PyPI
flycord 1.2.4
MAL-2026-1049 kam193

Feb 26, 2026
PyPI
edx-salesforce 99.9.9
MAL-2026-1048 kam193

Feb 26, 2026
PyPI
awareness-demo-pkg 0.1
MAL-2026-1044 kam193

Feb 26, 2026
PyPI
neural-compressor-jax 0.0.0, 1.0.0
MAL-2026-1035 kam193

Feb 25, 2026
PyPI
geocommunes-geoportal 0.0.1, 1.1
MAL-2026-1029 kam193

Feb 25, 2026
PyPI
spark-audit-notify 1.30, 1.31, 1.32
MAL-2026-1019 kam193 1 IOC

Feb 24, 2026
PyPI
do-not-install-this-package-003 0.1.0
MAL-2026-1018 kam193 2 IOCs

Feb 24, 2026
PyPI
request-httpx-9 0.0.1
MAL-2026-1004 kam193

Feb 24, 2026
PyPI
cnnct-eaas-corre 1322.0.0
MAL-2026-1003 oracle-using-macaron

Feb 23, 2026
PyPI
request-httpx-4 0.0.1
MAL-2026-1001 kam193

Feb 23, 2026
PyPI
scraper-npm 1.0.4
MAL-2026-1000 kam193 3 IOCs

Feb 23, 2026
PyPI
myasicapi 0.2.5
MAL-2026-984 kam193 1 IOC

Feb 22, 2026
PyPI
tensorflow-opt 0.6, 0.7, 0.8, 0.9, 0.10, 0.11, 0.12, 0.13, 0.14, 0.15, 0.16, 0.17, 0.18, 0.19,…
MAL-2026-983 kam193

Feb 22, 2026
PyPI
trunket-dev-driver 0.1.0
MAL-2026-982 kam193

Feb 22, 2026
PyPI
home-robot 0.0.0, 1.0.0
MAL-2026-979 kam193

Feb 22, 2026
PyPI
airbnb-identity 156.1.2, 156.1.3
MAL-2026-977 kam193

Feb 20, 2026
PyPI
printrables 1.0.1
MAL-2026-951 kam193 8 IOCs

Feb 20, 2026
PyPI
ethrpc 6.6.2, 6.6.3, 6.6.4
MAL-2026-947 kam193 2 IOCs

Feb 19, 2026
PyPI
web3tool 6.6.1, 6.6.2, 6.6.3, 6.6.4, 6.6.5, 6.6.6
MAL-2026-950 kam193 2 IOCs

Feb 19, 2026
PyPI
ethrpc-accounts 0.9.1, 0.9.2
MAL-2026-948 kam193 2 IOCs

Feb 19, 2026
PyPI
ethrpc-keys 0.4.1, 0.4.3, 0.4.5, 0.4.6, 0.4.7, 0.4.8, 0.4.9, 0.5.0, 0.5.1, 0.5.2, 0.5.3, 0.…
MAL-2026-949 kam193 2 IOCs

Feb 19, 2026
PyPI
pylibcugraphops 0.0.0, 23.12.0, 23.12.1
MAL-2026-938 kam193

Feb 19, 2026
PyPI
questpro 1.0.0, 1.0.3, 3.0.0, 3.0.5, 4.0.0
MAL-2026-936 kam193 1 IOC

Feb 18, 2026
PyPI
telebot-infee 0.3
MAL-2026-937 kam193 6 IOCs

Feb 18, 2026
PyPI
telebot-infoe 0.3
MAL-2026-934 kam193 6 IOCs

Feb 18, 2026