Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,159 npm 223,989 PyPI 12,020 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,020 reports · Feed

PyPI
gtkfuscator 1.0.0
MAL-2025-191946 oracle-using-macaron

Dec 2, 2025
PyPI
hooktest3 0.1.1
MAL-2025-191761 kam193

Dec 2, 2025
PyPI
python-doenv 2.2.9, 2.2.8, 2.2.7, 2.2.6, 2.2.5, 2.2.4, 2.2.3
MAL-2025-191840 kam193

Dec 1, 2025
PyPI
starexx 2.0.1, 1.26, 1.27
MAL-2025-191662 reversing-labs

Dec 1, 2025
PyPI
rsa2026 213.9
MAL-2025-191660 reversing-labs

Dec 1, 2025
PyPI
realstarexx 1.0.0, 1.0.2
MAL-2025-191656 reversing-labs

Dec 1, 2025
PyPI
imad213insta 213.1, 213.2
MAL-2025-191639 reversing-labs

Dec 1, 2025
PyPI
hexdeclink 0.0.1
MAL-2025-191757 kam193, reversing-labs 4 IOCs

Dec 1, 2025
PyPI
multithreadedexecution 1.0.0
MAL-2025-191798 kam193 3 IOCs

Nov 30, 2025
PyPI
chat-prompt-logger 1.0.12, 1.0.11, 1.0.10, 1.0.9, 1.0.8, 1.0.7, 1.0.6, 1.0.5, 1.0.4, 1.0.3, 1.0.2
MAL-2025-191699 kam193, reversing-labs

Nov 30, 2025
PyPI
logguru 0.7.3, 0.7.4, 0.7.5, 0.7.6, 0.7.7, 0.7.8
MAL-2025-191783 kam193 2 IOCs

Nov 29, 2025
PyPI
discord-selfsbotsx 1.0.1, 1.0.0
MAL-2025-191718 kam193, reversing-labs 3 IOCs

Nov 27, 2025
PyPI
threading-helper 0.0.1
MAL-2025-191898 kam193, reversing-labs

Nov 27, 2025
PyPI
dev-server-python 99.9.9
MAL-2025-191717 kam193, reversing-labs

Nov 27, 2025
PyPI
gptall 0.0.1
MAL-2025-191742 kam193, reversing-labs

Nov 27, 2025
PyPI
discordhelper-ecr 1.0.0
MAL-2025-191719 kam193

Nov 26, 2025
PyPI
rtcplogin 1.6.3
MAL-2025-191858 kam193, reversing-labs 4 IOCs

Nov 26, 2025
PyPI
tablates 1.0.1, 1.0.3
MAL-2025-191534 google-open-source-security, kam193, reversing-labs 3 IOCs

Nov 26, 2025
PyPI
hooktest2 0.1.1
MAL-2025-191483 ossf-package-analysis, kam193

Nov 26, 2025
PyPI
atlassian-praz 99.0.0
MAL-2025-191476 ossf-package-analysis, kam193

Nov 26, 2025
PyPI
atlassian-exp 99.0.0
MAL-2025-191475 ossf-package-analysis, kam193

Nov 26, 2025
PyPI
rtcpstream 1.6.3
MAL-2025-191859 kam193, reversing-labs 4 IOCs

Nov 25, 2025
PyPI
hexcon 0.0.1
MAL-2025-191755 kam193 4 IOCs

Nov 25, 2025
PyPI
tableate 0.0.1
MAL-2025-191535 google-open-source-security, kam193, reversing-labs 3 IOCs

Nov 25, 2025
PyPI
pyrtp 1.6.3
MAL-2025-191837 kam193, reversing-labs 4 IOCs

Nov 24, 2025
PyPI
rtcpy 1.6.3
MAL-2025-191860 kam193, reversing-labs 4 IOCs

Nov 24, 2025
PyPI
aounitaounit2 0.0.1
MAL-2025-191682 kam193, reversing-labs 4 IOCs

Nov 24, 2025
PyPI
chicopute 0.0.1
MAL-2025-191700 kam193, reversing-labs 4 IOCs

Nov 24, 2025
PyPI
aiostreams 0.0.1
MAL-2025-191675 kam193, reversing-labs 4 IOCs

Nov 24, 2025
PyPI
jsonschemex 0.1.5, 0.1.4, 0.1.3, 0.1.2, 0.1.1, 0.1.0
MAL-2025-191769 kam193 4 IOCs

Nov 24, 2025
PyPI
evil-py-argo-shell 0.1.2, 0.1.1, 0.1.0
MAL-2025-191722 kam193

Nov 24, 2025
PyPI
mongland 0.0.1
MAL-2025-191794 kam193, reversing-labs 4 IOCs

Nov 24, 2025
PyPI
zakuchienne 0.0.1
MAL-2025-191940 kam193, reversing-labs 4 IOCs

Nov 24, 2025
PyPI
mescouilles 0.0.1
MAL-2025-191790 kam193, reversing-labs 4 IOCs

Nov 23, 2025
PyPI
testingpkgja 0.1.0
MAL-2025-191894 kam193, reversing-labs

Nov 23, 2025
PyPI
hooktest1 0.1.1, 0.1.0
MAL-2025-191760 kam193, reversing-labs

Nov 23, 2025
PyPI
speed-testing-vps 0.2
MAL-2025-191875 kam193 2 IOCs

Nov 23, 2025
PyPI
minizip 0.1.3, 0.1.4
MAL-2025-191792 kam193, reversing-labs 3 IOCs

Nov 23, 2025
PyPI
hexdecnet 0.0.1
MAL-2025-191758 kam193, reversing-labs 4 IOCs

Nov 23, 2025
PyPI
uuzip 0.1.3, 0.1.2, 0.1.1, 0.1.0
MAL-2025-191918 kam193 3 IOCs

Nov 22, 2025