Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,159 npm 223,989 PyPI 12,020 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,020 reports · Feed

PyPI
legendevil1 1.0.0
MAL-2026-256 kam193 5 IOCs

Jan 14, 2026
PyPI
hairest 2.1.0, 2.3.2, 2.3.3
MAL-2026-254 kam193

Jan 14, 2026
PyPI
clipcord 1.7.0, 1.7.1, 1.7.2
MAL-2026-253 kam193

Jan 14, 2026
PyPI
solana-program 1.0.1, 1.0.2
MAL-2026-252 ossf-package-analysis, kam193

Jan 14, 2026
PyPI
soupclaw 1.7.1, 1.7.2, 1.7.3, 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4
MAL-2026-251 kam193

Jan 14, 2026
PyPI
transitive-req 0.0.0, 1.0.0
MAL-2026-250 kam193

Jan 14, 2026
PyPI
dify-api 2.0.0
MAL-2026-248 kam193, ossf-package-analysis

Jan 13, 2026
PyPI
formater 1.0.0, 1.0.1
MAL-2026-237 kam193 5 IOCs

Jan 12, 2026
PyPI
graponater 1.0.0
MAL-2026-236 kam193 4 IOCs

Jan 12, 2026
PyPI
libc-dev 0.0.0, 0.0.2
MAL-2026-191 kam193

Jan 11, 2026
PyPI
oncecall 0.1.0
MAL-2026-189 kam193 4 IOCs

Jan 10, 2026
PyPI
do-not-install-this-package-002 0.1.0, 0.1.1
MAL-2026-163 ossf-package-analysis, kam193 2 IOCs

Jan 8, 2026
PyPI
btcli-security 1.1.0, 1.1.1, 1.1.2
MAL-2026-162 kam193 4 IOCs

Jan 8, 2026
PyPI
lnatainstaller 1.0.0
MAL-2026-128 kam193 4 IOCs

Jan 7, 2026
PyPI
codefrequencychecker 0.0.1, 0.0.2, 0.0.3, 0.0.5, 0.0.7
MAL-2026-126 kam193

Jan 7, 2026
PyPI
py-publish-test-0126 0.1.0, 0.2.0
MAL-2026-98 kam193 4 IOCs

Jan 6, 2026
PyPI
testingpy 0.1.3
MAL-2026-99 kam193 4 IOCs

Jan 6, 2026
PyPI
robustinfer 0.1.0, 0.1.1, 0.1.2
MAL-2026-97 kam193

Jan 6, 2026
PyPI
pycolorom 1.0.1
MAL-2026-96 kam193 4 IOCs

Jan 6, 2026
PyPI
auto-backup-linux 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5, 1.0.6, 1.0.7
MAL-2026-923 kam193, reversing-labs 8 IOCs

Jan 5, 2026
PyPI
auto-backup-macos 1.0.0, 1.0.2, 1.0.3, 1.0.5, 1.0.6, 1.0.7
MAL-2026-924 kam193, reversing-labs 8 IOCs

Jan 5, 2026
PyPI
auto-backup-wsl 1.0.0, 1.0.2, 1.0.3, 1.0.4, 1.0.5, 1.0.6, 1.0.8, 1.0.9
MAL-2026-926 kam193, reversing-labs 8 IOCs

Jan 5, 2026
PyPI
auto-backup-wins 1.0.0, 1.0.2, 1.0.3, 1.0.4, 1.0.5
MAL-2026-925 kam193, reversing-labs 8 IOCs

Jan 5, 2026
PyPI
lium-io-gztensor 0.0.3, 0.0.5, 4.96
MAL-2026-55 kam193 4 IOCs

Jan 5, 2026
PyPI
lium-4-96 0.0.3
MAL-2026-54 kam193 4 IOCs

Jan 5, 2026
PyPI
async-substrate-interface-upgrade 1.5.17
MAL-2026-51 kam193 4 IOCs

Jan 5, 2026
PyPI
celium-collateral-upgrade 1.1.7
MAL-2026-52 kam193 4 IOCs

Jan 5, 2026
PyPI
gztensor-cli 0.0.1, 0.0.2, 0.0.3, 0.0.4, 0.1.1, 0.1.2
MAL-2026-53 kam193 4 IOCs

Jan 5, 2026
PyPI
pyrogrom 0.3
MAL-2026-42 kam193 4 IOCs

Jan 5, 2026
PyPI
aiihttp 3.13.3
MAL-2026-35 kam193 3 IOCs

Jan 4, 2026
PyPI
aoohttp 3.13.3
MAL-2026-37 kam193 3 IOCs

Jan 4, 2026
PyPI
auohttp 3.13.3
MAL-2026-38 kam193 3 IOCs

Jan 4, 2026
PyPI
aiohtto 3.13.3
MAL-2026-36 kam193 3 IOCs

Jan 4, 2026
PyPI
blobhunter-depconf-poc 999.0.0
MAL-2026-33 kam193

Jan 4, 2026
PyPI
telstra 2.0.1
MAL-2026-31 kam193, ossf-package-analysis

Jan 3, 2026
PyPI
chrome-stealth 0.1.0
MAL-2026-28 kam193 3 IOCs

Jan 3, 2026
PyPI
qdatainstaller 1.0.1
MAL-2026-27 kam193 3 IOCs

Jan 3, 2026
PyPI
pdatainstaller 1.0.0
MAL-2026-26 kam193 3 IOCs

Jan 2, 2026
PyPI
gatr 0.0.0, 0.0.1
MAL-2026-7 kam193

Jan 2, 2026
PyPI
ziphash 0.1.5, 0.1.6
MAL-2026-6 kam193 5 IOCs

Jan 1, 2026