Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,159 npm 223,989 PyPI 12,020 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,020 reports · Feed

PyPI
morty-package 0.0.0a1
MAL-2026-595 kam193

Jan 28, 2026
PyPI
pypi-package-explore 0.0.1a0, 0.0.2a0, 0.0.3a0, 0.0.4a1, 0.0.4a2, 0.0.4a3, 0.0.4a4
MAL-2026-593 kam193

Jan 28, 2026
PyPI
pytorch-mutex 0.0.0, 1, 7.0.0, 7.0.1, 7.0.3, 10.0.0
MAL-2026-590 kam193

Jan 28, 2026
PyPI
tabullates 1.0.1, 1.0.2, 1.0.3, 1.0.4
MAL-2026-562 kam193 8 IOCs

Jan 28, 2026
PyPI
tabletas 1.0.1, 1.0.2, 1.0.4
MAL-2026-548 kam193 8 IOCs

Jan 27, 2026
PyPI
solhint-plugin-hyperlane 0.1.0
MAL-2026-547 kam193

Jan 27, 2026
PyPI
radishwxm5 2021.11.9
MAL-2026-510 kam193

Jan 26, 2026
PyPI
selenium-integration 1.0.1
MAL-2026-506 kam193 5 IOCs

Jan 25, 2026
PyPI
flask-hookserver 999.0.0, 999.0.1
MAL-2026-505 kam193

Jan 25, 2026
PyPI
researchpoc 99.99.9
MAL-2026-504 kam193

Jan 25, 2026
PyPI
system-integration-toxi 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5, 1.0.6
MAL-2026-501 kam193 5 IOCs

Jan 25, 2026
PyPI
test-poc-package-for-session 0.0.1
MAL-2026-502 kam193

Jan 25, 2026
PyPI
test-poc-package-for-session-2 0.0.1
MAL-2026-503 kam193

Jan 25, 2026
PyPI
system-integration 1.0.0, 1.0.1
MAL-2026-499 kam193 3 IOCs

Jan 25, 2026
PyPI
instascan-pro 1.0.0
MAL-2026-498 kam193

Jan 24, 2026
PyPI
tableates 1.0.3, 1.0.4, 1.0.5, 1.0.6, 1.0.1, 1.0.2
MAL-2026-492 kam193, reversing-labs 7 IOCs

Jan 23, 2026
PyPI
tabletes 1.0.4, 1.0.6, 1.0.8
MAL-2026-490 kam193 7 IOCs

Jan 23, 2026
PyPI
urlsssser 0.2
MAL-2026-470 kam193 6 IOCs

Jan 22, 2026
PyPI
cflashfiles 2.1, 2.2, 2.3
MAL-2026-469 kam193 1 IOC

Jan 22, 2026
PyPI
urlsser 0.2
MAL-2026-468 kam193 6 IOCs

Jan 22, 2026
PyPI
icloud-recovery 0.1.0, 0.1.1, 0.1.2, 0.1.5, 0.1.6, 0.2.0
MAL-2026-467 kam193

Jan 22, 2026
PyPI
sympy-dev 1.2.3, 1.2.4, 1.2.5, 1.2.6
MAL-2026-450

Jan 22, 2026
PyPI
icloudprocessor 0.1.0, 1.0.0, 1.0.1, 1.0.7, 1.0.9, 1.0.10
MAL-2026-449 kam193 2 IOCs

Jan 22, 2026
PyPI
ttam-ploy 1.4.17, 1.8.0
MAL-2026-447 kam193

Jan 21, 2026
PyPI
code-transfering-3 0.1
MAL-2026-445 kam193

Jan 21, 2026
PyPI
code-transfering-4 0.1
MAL-2026-446 kam193

Jan 21, 2026
PyPI
terminalbrush 0.1, 0.2.4
MAL-2026-444 kam193 1 IOC

Jan 21, 2026
PyPI
1q847 0.0.1, 0.0.2, 0.0.3, 0.0.4, 0.0.5, 0.0.6, 0.0.7, 0.1.0, 0.1.1, 0.2.0, 0.3.0, 0.…
MAL-2026-443 kam193

Jan 21, 2026
PyPI
xadauiom 99.1.0, 101.0.0
MAL-2026-442 kam193

Jan 21, 2026
PyPI
anduril-lattice-sdk-grpc-python 2.0.0, 99.99.9
MAL-2026-440 kam193

Jan 21, 2026
PyPI
spellcheckpy 1.1.0, 1.2.0
MAL-2026-441 kam193 7 IOCs

Jan 21, 2026
PyPI
coolpackage2323 1.0.0, 9.9.9, 1.3.2, 6.7.9
MAL-2026-376 kam193 1 IOC

Jan 21, 2026
PyPI
spellcheckerpy 1.0.0, 1.1.0, 1.3.0
MAL-2026-375 kam193 5 IOCs

Jan 20, 2026
PyPI
medifile 2.1
MAL-2026-352 kam193

Jan 19, 2026
PyPI
nanoinstaller 1.0.0
MAL-2026-351 kam193 7 IOCs

Jan 19, 2026
PyPI
bnanainstaller 1.0.0
MAL-2026-350 kam193 7 IOCs

Jan 19, 2026
PyPI
urlssser 0.1, 0.2
MAL-2026-326 kam193 6 IOCs

Jan 18, 2026
PyPI
marshel 0.3
MAL-2026-325 kam193 6 IOCs

Jan 18, 2026
PyPI
uitil 0.1.4, 0.1.5
MAL-2026-1036 kam193 3 IOCs

Jan 16, 2026
PyPI
haqawi 1.0.0
MAL-2026-255 kam193 5 IOCs

Jan 14, 2026