Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,159 npm 223,989 PyPI 12,020 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,020 reports · Feed

PyPI
hidden-powershell-runner-ax7 0.1.1, 0.1.0
MAL-2025-192659 kam193 3 IOCs

Dec 19, 2025
PyPI
f5rest 99.0.0
MAL-2025-192609 kam193

Dec 18, 2025
PyPI
f5-logger 99.0.0
MAL-2025-192608 kam193

Dec 18, 2025
PyPI
bigip 99.0.0
MAL-2025-192607 kam193

Dec 18, 2025
PyPI
trondec 0.0.1
MAL-2025-192605 kam193 4 IOCs

Dec 17, 2025
PyPI
smtblib 0.1.8, 0.1.9
MAL-2025-192579 kam193 4 IOCs

Dec 15, 2025
PyPI
yzip 0.1.0
MAL-2025-192468 kam193 3 IOCs

Dec 11, 2025
PyPI
gxzip 0.1.0
MAL-2025-192467 kam193 3 IOCs

Dec 10, 2025
PyPI
netbenchkit 1.0.2, 1.0.1, 1.0.0
MAL-2025-192437 kam193 1 IOC

Dec 10, 2025
PyPI
synium 1.0.2, 1.0.1, 1.0.0
MAL-2025-192438 kam193 1 IOC

Dec 10, 2025
PyPI
jsonschema-utf8 4.1.2, 4.1.1, 4.1.0
MAL-2025-192436 kam193

Dec 10, 2025
PyPI
loguru-utf8 0.7.3, 0.7.4
MAL-2025-192435 kam193

Dec 10, 2025
PyPI
ctosec-appsec-wb-xray-adapters 0.1.1, 0.1.2, 0.2.0, 0.2.1, 0.2.2, 0.2.3
MAL-2025-192431 kam193

Dec 10, 2025
PyPI
kzip 0.1.0
MAL-2025-192432 kam193 3 IOCs

Dec 10, 2025
PyPI
bigpyx 0.0.2, 0.0.1
MAL-2025-192430 kam193 8 IOCs

Dec 10, 2025
PyPI
helloharry123c 0.1.2
MAL-2025-192396 kam193

Dec 9, 2025
PyPI
ctosec-appsec-wb-xray-adapter 0.1.1, 0.2.0
MAL-2025-192393 kam193

Dec 9, 2025
PyPI
ajenti-plugin-testing-pyld 1.1.1, 0.0.1, 0.99.999
MAL-2025-192392 kam193

Dec 9, 2025
PyPI
bignum 0.1.1, 0.1.0, 0.1.2, 0.1.3
MAL-2025-192391 kam193 8 IOCs

Dec 9, 2025
PyPI
do-not-install-this-package-001 0.1.3, 0.1.4, 0.1.5, 0.1.6
MAL-2025-192387 ossf-package-analysis, kam193

Dec 9, 2025
PyPI
telcoo 1.0.4, 1.0.3, 1.0.2
MAL-2025-192386 kam193

Dec 9, 2025
PyPI
graphsync 1.1.1, 1.1.0
MAL-2025-192385 kam193 8 IOCs

Dec 9, 2025
PyPI
raft-dask 1.1.0, 0.0.0
MAL-2025-192382 kam193

Dec 9, 2025
PyPI
sketchfab-spinner 99.9.9, 99.9.10, 99.9.11
MAL-2025-192380 ossf-package-analysis, kam193

Dec 9, 2025
PyPI
helloharry123p 0.1.0, 0.1.1
MAL-2025-192379 kam193

Dec 8, 2025
PyPI
graphnode 1.1.0, 1.0.1, 1.0.0
MAL-2025-192376 kam193 8 IOCs

Dec 8, 2025
PyPI
hexdeci 0.0.1
MAL-2025-192367 kam193 4 IOCs

Dec 7, 2025
PyPI
python-tg-bot 22.5.1, 22.5
MAL-2025-192365 kam193

Dec 7, 2025
PyPI
blank-lib 0.0.8, 0.0.9, 0.1.0
MAL-2025-192364 kam193

Dec 7, 2025
PyPI
evil-rce2 1.0.0
MAL-2025-192362 kam193

Dec 6, 2025
PyPI
telco 1.0.1, 1.0.2
MAL-2025-192363 kam193

Dec 6, 2025
PyPI
evil-rce 1.0.0
MAL-2025-192351 kam193

Dec 6, 2025
PyPI
qt-main 5.15.2, 0.0.0
MAL-2025-192349 kam193, reversing-labs

Dec 5, 2025
PyPI
rendom 0.2
MAL-2025-192323 kam193 2 IOCs

Dec 5, 2025
PyPI
joyboyw 1.0.1, 1.0.0
MAL-2025-192322 kam193 1 IOC

Dec 5, 2025
PyPI
dell-recovery 99.99.99
MAL-2025-192305 kam193

Dec 4, 2025
PyPI
dell-restore-system 99.99.99
MAL-2025-192306 kam193

Dec 4, 2025
PyPI
coremsft 0.1, 0.2
MAL-2025-192302 kam193

Dec 4, 2025
PyPI
hellospa 90.0.0
MAL-2025-191972 kam193 1 IOC

Dec 3, 2025
PyPI
pulsecord 1.0.0
MAL-2025-191830 kam193 3 IOCs

Dec 2, 2025