Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,159 npm 223,989 PyPI 12,020 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,020 reports · Feed

PyPI
queryservice-client 0.1.0, 2.3.2
MAL-2026-5 kam193

Jan 1, 2026
PyPI
sfnt2woff-zopfli 0.0.0, 17.0.0
MAL-2026-1 kam193

Jan 1, 2026
PyPI
requeses 1.0.0
MAL-2025-193011 kam193 4 IOCs

Dec 31, 2025
PyPI
pyrogrqm 0.3
MAL-2025-193010 kam193 4 IOCs

Dec 31, 2025
PyPI
telegreph 0.2, 0.3
MAL-2025-193008 kam193 4 IOCs

Dec 31, 2025
PyPI
aiogrem 0.2
MAL-2025-193007 kam193 4 IOCs

Dec 31, 2025
PyPI
accesspdp 2.0.1
MAL-2025-193006 kam193, ossf-package-analysis

Dec 31, 2025
PyPI
brolool4141412 1.0.0
MAL-2025-192989 kam193

Dec 31, 2025
PyPI
broooxddd1414 1.0.0
MAL-2025-192990 kam193

Dec 31, 2025
PyPI
weorewfoi2393 1.0.0
MAL-2025-192993 kam193

Dec 31, 2025
PyPI
pyrogrem 0.2
MAL-2025-192991 kam193 2 IOCs

Dec 31, 2025
PyPI
umap 0.0.0, 0.1.1, 0.1.2
MAL-2025-192992 kam193

Dec 31, 2025
PyPI
rippling-cli 2.0.2, 1.0.1
MAL-2025-192962 kam193, ossf-package-analysis

Dec 30, 2025
PyPI
awsutil 99.99.99, 0.1.1, 0.1.0
MAL-2025-192961 kam193 4 IOCs

Dec 29, 2025
PyPI
smtmlib 0.1.6, 0.1.7
MAL-2025-192958 kam193 5 IOCs

Dec 29, 2025
PyPI
cryptozip 0.1.0, 0.1.1, 0.1.2, 0.1.4, 0.1.3
MAL-2025-192956 kam193 5 IOCs

Dec 28, 2025
PyPI
aiogram-types-v3 3.0.1, 3.0.2, 3.0.5, 3.1.0, 3.1.5, 3.3.1, 3.4.0, 3.9.7, 3.2.0, 4.2.0, 5.9.8, 3.…
MAL-2025-192953 kam193 1 IOC

Dec 28, 2025
PyPI
extrazip 0.1.0
MAL-2025-192948 kam193 5 IOCs

Dec 27, 2025
PyPI
crypo 0.0.3, 0.0.2, 0.0.1
MAL-2025-192947 kam193

Dec 27, 2025
PyPI
crpto 0.0.3, 0.0.2, 0.0.1
MAL-2025-192946 kam193

Dec 27, 2025
PyPI
flaask 0.0.4, 0.0.3, 0.0.2, 0.0.1
MAL-2025-192945 kam193

Dec 27, 2025
PyPI
telebot-bot 0.2
MAL-2025-192942 kam193 2 IOCs

Dec 26, 2025
PyPI
telegrem 0.2
MAL-2025-192943 kam193 2 IOCs

Dec 26, 2025
PyPI
aiogram-3 1.0.0, 10.0.0
MAL-2025-192940 kam193 1 IOC

Dec 26, 2025
PyPI
aiogram-sever-patch 3.3.8, 3.3.7, 3.3.9, 3.5.0, 3.6.0
MAL-2025-192931 kam193 1 IOC

Dec 25, 2025
PyPI
pxdbench 0.1.0, 0.0.0
MAL-2025-192930 kam193

Dec 25, 2025
PyPI
envtoolsx 1.0.0
MAL-2025-192929 kam193 2 IOCs

Dec 24, 2025
PyPI
livekit-agents-hedra 1.1.1, 0.0.0
MAL-2025-192928 kam193

Dec 24, 2025
PyPI
lanchain-openai 1.1.1, 0.0.0
MAL-2025-192699 kam193

Dec 23, 2025
PyPI
fireeye-main 2.0.0, 2.6
MAL-2025-192893 reversing-labs

Dec 23, 2025
PyPI
fire-eye-bcs 2, 2.3, 2.4
MAL-2025-192892 reversing-labs

Dec 23, 2025
PyPI
blastchamber-python-pypi 0.0.4, 0.1.0, 0.2.0, 0.2.2
MAL-2025-192891 reversing-labs

Dec 23, 2025
PyPI
smtrlib 0.1.6, 0.1.5
MAL-2025-192690 kam193 4 IOCs

Dec 22, 2025
PyPI
unizip 0.1.0
MAL-2025-192689 kam193 5 IOCs

Dec 22, 2025
PyPI
hooktest-fin 0.1.1
MAL-2025-192685 kam193

Dec 21, 2025
PyPI
runtimeutils 1.0.2, 1.0.1, 1.0.0
MAL-2025-192686 kam193 2 IOCs

Dec 21, 2025
PyPI
colorfulpacket 0.0.1
MAL-2025-192684 kam193 1 IOC

Dec 21, 2025
PyPI
ai-cypher 0.1.0, 0.2.0
MAL-2025-192683 kam193

Dec 21, 2025
PyPI
system-health-check-test-unique 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0, 0.2.9, 0.2.8, 0.2.7, 0.2.6, 0.…
MAL-2025-192679 kam193 4 IOCs

Dec 19, 2025
PyPI
connections-api-hidden-runner 0.1.3, 0.1.2
MAL-2025-192658 kam193 3 IOCs

Dec 19, 2025