Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,159 npm 223,989 PyPI 12,020 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,020 reports · Feed

PyPI
wayspiritmcp-weather 0.8.0, 0.7.15, 0.7.14, 0.7.13, 0.7.12, 0.7.11, 0.7.10, 0.7.9, 0.7.8, 0.7.7, 0.7…
MAL-2025-191927 kam193

Nov 5, 2025
PyPI
faker-py123123thon 999.0.0
MAL-2025-191625 reversing-labs, kam193

Nov 3, 2025
PyPI
python-requirements-inspector 999.0.1, 999.0.0
MAL-2025-49320 ossf-package-analysis, reversing-labs, kam193

Nov 2, 2025
PyPI
faker-python 999.0.0, 999.0.1, 0.0.1
MAL-2025-49310 ossf-package-analysis, reversing-labs, kam193

Nov 2, 2025
PyPI
krisp-audio 1.0.0, 0.0.0
MAL-2025-191643 reversing-labs, kam193

Nov 2, 2025
PyPI
hexdecimal 0.0.1
MAL-2025-191756 kam193 4 IOCs

Nov 2, 2025
PyPI
pygments-richstyle 1.0.0
MAL-2025-191654 reversing-labs, kam193

Oct 31, 2025
PyPI
richx 0.1.0, 1.0.0, 1.1.0, 1.1.1
MAL-2025-191658 reversing-labs, kam193

Oct 31, 2025
PyPI
speed-testing-nt 0.2
MAL-2025-191874 kam193 2 IOCs

Oct 31, 2025
PyPI
kingwork-test 1.0.1
MAL-2025-191775 kam193 4 IOCs

Oct 29, 2025
PyPI
install-all-setup 0.1.0, 0.1.1
MAL-2025-191640 reversing-labs, kam193 2 IOCs

Oct 29, 2025
PyPI
speedd-testing-bot 0.2
MAL-2025-191876 kam193 2 IOCs

Oct 28, 2025
PyPI
aiohappyeyeball 2.6.1
MAL-2025-191616 reversing-labs, kam193

Oct 27, 2025
PyPI
httpserver-cache 3.13.1, 3.14.0
MAL-2025-191632 reversing-labs, kam193

Oct 27, 2025
PyPI
donotinstall 1, 1.0
MAL-2025-191622 reversing-labs, kam193

Oct 26, 2025
PyPI
syschecker 1.0.0
MAL-2025-191663 reversing-labs, kam193 2 IOCs

Oct 26, 2025
PyPI
windowsrequir 1.0.2
MAL-2025-191665 reversing-labs, kam193 2 IOCs

Oct 26, 2025
PyPI
hexdecli 0.0.1, 0.0.2
MAL-2025-191630 reversing-labs, kam193 4 IOCs

Oct 25, 2025
PyPI
benign-lib 1.0.0
MAL-2025-191620 reversing-labs, kam193

Oct 25, 2025
PyPI
python3-autopep8 0.0.0
MAL-2025-191844 kam193

Oct 25, 2025
PyPI
statsapi 1.7.2, 0.0.0
MAL-2025-191878 kam193

Oct 25, 2025
PyPI
ethaddrlib 0.1.0, 0.1.1
MAL-2025-191624 reversing-labs, kam193 2 IOCs

Oct 25, 2025
PyPI
hexdecpy 0.0.2, 0.0.1
MAL-2025-191631 reversing-labs, kam193 4 IOCs

Oct 24, 2025
PyPI
aiohttp-openssl 3.13.1
MAL-2025-191617 reversing-labs, kam193

Oct 24, 2025
PyPI
web3eth 7.13.0
MAL-2025-48910 reversing-labs

Oct 23, 2025
PyPI
trstk 1.0.4
MAL-2025-48909 reversing-labs

Oct 23, 2025
PyPI
testpackageclaim 1.0.1
MAL-2025-48902 reversing-labs

Oct 23, 2025
PyPI
testpackage-hello 0.3
MAL-2025-48901 reversing-labs

Oct 23, 2025
PyPI
test422 1.0.1
MAL-2025-48900 reversing-labs

Oct 23, 2025
PyPI
test421 1.0.1
MAL-2025-48899 reversing-labs

Oct 23, 2025
PyPI
request-unitest 0.1.0
MAL-2025-48897 reversing-labs

Oct 23, 2025
PyPI
my-test-packagexx 1.0.1
MAL-2025-48894 reversing-labs

Oct 23, 2025
PyPI
image2hex 0.1.0, 0.1.1, 0.1.2, 0.1.3, 0.1.4, 0.1.5, 0.1.6, 0.1.7
MAL-2025-48893 reversing-labs

Oct 23, 2025
PyPI
aiohttp-ssl 3.13.1
MAL-2025-191618 reversing-labs, kam193

Oct 23, 2025
PyPI
smart-scheduler 0.1.0, 0.1.1, 0.1.2, 0.1.3, 0.1.4
MAL-2025-191661 reversing-labs, kam193 1 IOC

Oct 22, 2025
PyPI
requests-os 1.0.0
MAL-2025-191657 reversing-labs, kam193

Oct 22, 2025
PyPI
lbank-connector-pythons 2.1, 2.2, 2.3, 2.0
MAL-2025-191644 reversing-labs, kam193

Oct 22, 2025
PyPI
asynhttp 3.13.1
MAL-2025-191619 reversing-labs, kam193

Oct 22, 2025
PyPI
libtasnl 1337.0.0
MAL-2025-191645 reversing-labs, kam193

Oct 22, 2025
PyPI
installyoura 0.1.0
MAL-2025-191641 reversing-labs, kam193 1 IOC

Oct 21, 2025