Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,159 npm 223,989 PyPI 12,020 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,020 reports · Feed

PyPI
pytelegramapi 2.32.7, 2.32.6, 2.32.5, 2.32.8
MAL-2025-191838 kam193

Oct 20, 2025
PyPI
yelp-pkg 1337.0.0
MAL-2025-191666 reversing-labs, kam193

Oct 20, 2025
PyPI
huzzleuo130 0.1
MAL-2025-191638 reversing-labs, kam193 1 IOC

Oct 19, 2025
PyPI
cheezokdi10 0.1
MAL-2025-191621 reversing-labs, kam193 1 IOC

Oct 19, 2025
PyPI
humunculous5910 0.2.9, 0.3.1
MAL-2025-191634 reversing-labs, kam193 1 IOC

Oct 19, 2025
PyPI
rando0192490 0.2.9, 0.1.9
MAL-2025-191655 reversing-labs, kam193 1 IOC

Oct 19, 2025
PyPI
humunculous59101 0.3.6
MAL-2025-191635 reversing-labs, kam193 1 IOC

Oct 19, 2025
PyPI
humunaiodio2443 0.3.6
MAL-2025-191633 reversing-labs, kam193 1 IOC

Oct 19, 2025
PyPI
unclesky5910 0.1
MAL-2025-191664 reversing-labs, kam193 1 IOC

Oct 19, 2025
PyPI
humunculous591014 0.1, 0.3.6
MAL-2025-191636 reversing-labs, kam193 1 IOC

Oct 19, 2025
PyPI
humunculous5910145 0.1
MAL-2025-191637 reversing-labs, kam193 1 IOC

Oct 19, 2025
PyPI
kirux189894 0.1
MAL-2025-191642 reversing-labs, kam193 1 IOC

Oct 19, 2025
PyPI
klsosdoids2 0.1
MAL-2025-191776 kam193 1 IOC

Oct 19, 2025
PyPI
huzzleup 0.1
MAL-2025-191762 kam193 1 IOC

Oct 19, 2025
PyPI
klsosdoids5 0.1
MAL-2025-191777 kam193 1 IOC

Oct 19, 2025
PyPI
abhamzufu 1.0.0
MAL-2025-191670 kam193 1 IOC

Oct 19, 2025
PyPI
ga3fario 1.0.0
MAL-2025-191627 reversing-labs, kam193 1 IOC

Oct 19, 2025
PyPI
ga3farifo 1.0.0
MAL-2025-191626 reversing-labs, kam193 1 IOC

Oct 19, 2025
PyPI
hamubika 1.0.0
MAL-2025-191747 kam193 1 IOC

Oct 19, 2025
PyPI
hamurico 0.1
MAL-2025-191628 reversing-labs, kam193 1 IOC

Oct 19, 2025
PyPI
rizco09 0.1.0
MAL-2025-191659 reversing-labs, kam193 1 IOC

Oct 19, 2025
PyPI
ptxcompiler 1.0.0, 0.0.0
MAL-2025-191653 reversing-labs, kam193

Oct 17, 2025
PyPI
poc-suppentest 1.0.0
MAL-2025-191652 reversing-labs, kam193

Oct 17, 2025
PyPI
egarcia-poc 0.1.0
MAL-2025-191623 reversing-labs, kam193

Oct 17, 2025
PyPI
makronlox 0.1.0, 0.1.1
MAL-2025-191646 reversing-labs, kam193 1 IOC

Oct 16, 2025
PyPI
musl-dev 1.0.0, 0.0.0
MAL-2025-191650 reversing-labs, kam193

Oct 16, 2025
PyPI
saintone 3.0.0, 2.0.0, 1.0.0
MAL-2025-191862 kam193 1 IOC

Oct 15, 2025
PyPI
md5-en 0.1.0, 0.2.0
MAL-2025-191649 reversing-labs, kam193 1 IOC

Oct 15, 2025
PyPI
tosa-serialization-lib 2.0.0, 0.0.0
MAL-2025-191908 kam193

Oct 14, 2025
PyPI
mcp-runcmd-server 2.0, 1.0
MAL-2025-191788 kam193 1 IOC

Oct 13, 2025
PyPI
hexdec 0.0.1
MAL-2025-191629 reversing-labs, kam193 4 IOCs

Oct 10, 2025
PyPI
python3-6 0.3.0, 0.2.0, 0.1.0
MAL-2025-191843 kam193 2 IOCs

Oct 10, 2025
PyPI
mcp-runcommand-server2 1.0.6
MAL-2025-191648 reversing-labs, kam193 1 IOC

Oct 10, 2025
PyPI
mcp-runcommand-server 1.0.7, 1.0.9, 1.0.10, 1.0.11, 1.0.12, 1.0.13, 1.0.8, 1.0.5
MAL-2025-191647 reversing-labs, kam193 1 IOC

Oct 10, 2025
PyPI
anothertestproject 0.1.7, 0.1.6, 0.1.5, 0.1.4, 0.1.3, 0.1.2, 0.1.1, 0.1.0
MAL-2025-191681 kam193 1 IOC

Oct 8, 2025
PyPI
gnosis-py 2.4.7, 0.0.0
MAL-2025-191740 kam193

Oct 6, 2025
PyPI
d1snakegame 0.1.3, 0.1.2, 0.1.1, 0.1.0
MAL-2025-191712 kam193

Oct 3, 2025
PyPI
emoted 0.1.0
MAL-2025-48890 reversing-labs, kam193 2 IOCs

Oct 2, 2025
PyPI
tikweb 1.0.4, 1.0.5
MAL-2025-47875 oracle-using-macaron

Oct 1, 2025
PyPI
gradio-videotimeline 1.0.0, 0.0.0
MAL-2025-191744 kam193

Oct 1, 2025