Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,159 npm 223,989 PyPI 12,020 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,020 reports · Feed

PyPI
mzip 0.1.0
MAL-2025-191799 kam193 3 IOCs

Nov 22, 2025
PyPI
uzip 0.1.1, 0.1.0
MAL-2025-191919 kam193 3 IOCs

Nov 22, 2025
PyPI
aiogram-msgeffect 1.2.1, 1.1.4
MAL-2025-191674 kam193, reversing-labs

Nov 22, 2025
PyPI
nspacercesolve 0.0.7, 0.0.6, 0.0.5, 0.0.4, 0.0.3, 0.0.2, 0.0.1
MAL-2025-191805 kam193 1 IOC

Nov 22, 2025
PyPI
tgeffect 1.1.3, 1.1.2, 1.1.0, 1.2.1, 1.3.1, 1.4.1, 1.4.2, 1.4.3, 1.4.4
MAL-2025-191897 kam193, reversing-labs

Nov 22, 2025
PyPI
voicemetterr 1.0.3, 1.0.2, 1.0.1, 1.0.0, 1.0.4, 1.0.5
MAL-2025-191921 kam193 1 IOC

Nov 21, 2025
PyPI
kdewebhelper 1.5.0, 1.0.0
MAL-2025-191772 kam193 1 IOC

Nov 20, 2025
PyPI
peptest2 1.2.3, 1.2.2
MAL-2025-191813 kam193, reversing-labs

Nov 20, 2025
PyPI
peptest 1.2.1, 1.2.0, 1.0.0
MAL-2025-191812 kam193, reversing-labs

Nov 20, 2025
PyPI
siitoogether 0.0.9, 0.0.8, 0.0.7, 0.0.6, 0.0.5
MAL-2025-191867 kam193, reversing-labs

Nov 20, 2025
PyPI
sitoogether 0.0.4, 0.0.3, 0.0.2, 0.0.1
MAL-2025-191870 kam193

Nov 19, 2025
PyPI
aws-enumerateiam 1.0.2, 1.0.1, 1.0.0
MAL-2025-191686 kam193, reversing-labs 4 IOCs

Nov 18, 2025
PyPI
requtils 1.0.2, 1.0.1, 1.0.0
MAL-2025-191857 kam193, reversing-labs 1 IOC

Nov 18, 2025
PyPI
perfviewer 14.2.5, 14.2.4, 14.2.3, 14.2.2, 14.2.1
MAL-2025-191814 kam193, reversing-labs 3 IOCs

Nov 16, 2025
PyPI
wallet-tracking 1.0.3, 1.0.4, 1.0.5, 1.0.6
MAL-2026-18443 kam193 3 IOCs

Nov 16, 2025
PyPI
spellcheckers 1.4.0, 1.3.0, 1.2.0, 1.1.1, 1.1.0, 1.0.0, 1.5.0
MAL-2025-191533 google-open-source-security, kam193 3 IOCs

Nov 15, 2025
PyPI
hexadecpy 0.0.1
MAL-2025-191754 kam193 4 IOCs

Nov 15, 2025
PyPI
pam98wyfupa98w 0.0.1
MAL-2025-191810 kam193 1 IOC

Nov 14, 2025
PyPI
d1n0-exploit-aaaa 0.0.1
MAL-2025-191710 kam193 1 IOC

Nov 14, 2025
PyPI
minemeld-core 0.9.31, 0.0.0
MAL-2025-191791 kam193, reversing-labs

Nov 14, 2025
PyPI
d1n0exploitaaaa 0.0.2, 0.0.1
MAL-2025-191711 kam193 1 IOC

Nov 14, 2025
PyPI
hexadec 0.0.1
MAL-2025-191753 kam193, reversing-labs 4 IOCs

Nov 14, 2025
PyPI
xsltproc 0.0.1, 0.0.0
MAL-2025-191937 kam193, reversing-labs

Nov 14, 2025
PyPI
pylibcugraph 0.0.1, 0.0.0
MAL-2025-191835 kam193, reversing-labs

Nov 13, 2025
PyPI
quicksort-pro 1.9.0, 1.8.0, 1.7.0, 1.6.0, 1.5.0, 1.0.0
MAL-2025-191850 kam193 2 IOCs

Nov 13, 2025
PyPI
zakuraweb 0.0.1
MAL-2025-191941 kam193 2 IOCs

Nov 12, 2025
PyPI
morosint 0.0.1
MAL-2025-191795 kam193 2 IOCs

Nov 12, 2025
PyPI
python-rootpath 0.1.9, 0.1.7, 0.1.1, 0.1.2, 0.1.3, 0.1.5, 0.1.6, 0.1.8
MAL-2025-191841 kam193, reversing-labs 1 IOC

Nov 12, 2025
PyPI
google-cloud-iam-credentials 2.20.0
MAL-2025-191741 kam193

Nov 12, 2025
PyPI
llmboost-hub 0.1.1
MAL-2025-112503 oracle-using-macaron

Nov 11, 2025
PyPI
db-aggregator-api 0.2.0, 0.1.0
MAL-2025-191713 kam193 1 IOC

Nov 8, 2025
PyPI
chromifypro 1.0.1, 1.0.0
MAL-2025-191702 kam193, reversing-labs

Nov 7, 2025
PyPI
wei516-ppa 0.1.3, 0.1.2
MAL-2025-191930 kam193

Nov 7, 2025
PyPI
wei516-tpa 0.1.4, 0.1.5, 0.1.6
MAL-2025-191931 kam193

Nov 6, 2025
PyPI
mcp-weather-full 0.8.2, 0.8.1, 0.8.0, 0.8.3, 0.8.4, 0.8.5, 0.8.6, 0.8.7, 0.8.8, 0.8.9, 0.9.0, 0.…
MAL-2025-191789 kam193

Nov 6, 2025
PyPI
wei516-enconly 0.1.8, 0.1.7, 0.1.6, 0.1.5, 0.1.9, 0.2.0, 0.2.1, 0.2.2, 0.2.3
MAL-2025-191929 kam193

Nov 6, 2025
PyPI
testpurpleteaming 1.26.14, 1.26.13, 1.26.10
MAL-2025-191895 kam193

Nov 6, 2025
PyPI
wayspiritmcp-tpa 0.1.3, 0.1.2, 0.1.1, 0.1.0
MAL-2025-191926 kam193

Nov 5, 2025
PyPI
wayspiritmcp-ppa 0.1.1, 0.1.0
MAL-2025-191925 kam193

Nov 5, 2025
PyPI
wayspiritmcp-enconly 0.1.3, 0.1.2, 0.1.1, 0.1.0
MAL-2025-191924 kam193

Nov 5, 2025