Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,159 npm 223,989 PyPI 12,020 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,020 reports · Feed

PyPI
regixtest 0.1.0, 0.1.1, 0.1.2, 0.1.3, 0.1.4
MAL-2025-48896 reversing-labs, kam193 2 IOCs

Oct 1, 2025
PyPI
bioql 3.0.2, 3.0.1, 3.1.0, 3.1.1, 4.0.0, 5.0.4, 5.0.5, 5.0.6, 5.0.7, 5.1.0, 5.0.8, 5.…
MAL-2025-47868 ossf-package-analysis

Sep 30, 2025
PyPI
propeller-solver-core 133.3.7
MAL-2025-47820 ossf-package-analysis, kam193

Sep 28, 2025
PyPI
tronlastpy 0.0.1
MAL-2025-48908 reversing-labs, kam193 4 IOCs

Sep 27, 2025
PyPI
tronlast 0.0.1
MAL-2025-48907 reversing-labs, kam193 4 IOCs

Sep 26, 2025
PyPI
matplotliv 0.1.0
MAL-2025-191787 kam193

Sep 26, 2025
PyPI
soopsocks 0.2.7, 0.2.6, 0.2.5, 0.2.4, 0.2.3, 0.2.2, 0.2.1, 0.2.0, 0.1.3, 0.1.2, 0.1.1, 0.…
MAL-2025-191872 kam193 4 IOCs

Sep 26, 2025
PyPI
netkit-lite 1.2.3, 1.3.2, 1.3.1, 1.3.0, 1.2.9, 1.2.8, 1.2.7, 1.2.6, 1.2.5, 1.2.4
MAL-2025-48895 reversing-labs, kam193

Sep 26, 2025
PyPI
worldnex 1.0.2, 1.0.3, 1.0.4, 1.0.5, 1.0.6, 1.0.7, 1.1.0, 2.0.0, 2.0.1
MAL-2025-47813 reversing-labs

Sep 26, 2025
PyPI
ipfind-microtip 0.1.0, 0.1.1
MAL-2025-47775 reversing-labs

Sep 26, 2025
PyPI
eenomenallib 2.7.0
MAL-2025-47761 reversing-labs

Sep 26, 2025
PyPI
discordext 0.1.0, 0.1.1, 0.1.2
MAL-2025-47757 reversing-labs

Sep 26, 2025
PyPI
btcli 9.9.0, 9.9.1, 9.9.3, 9.9.4, 9.10.0
MAL-2025-47750 reversing-labs

Sep 26, 2025
PyPI
bitensor-cli 9.9.0
MAL-2025-47748 reversing-labs

Sep 26, 2025
PyPI
bloxypy 0.1.9
MAL-2025-47572 oracle-using-macaron, kam193 1 IOC

Sep 26, 2025
PyPI
tronhexpy 0.0.1
MAL-2025-48904 reversing-labs, kam193 4 IOCs

Sep 24, 2025
PyPI
final-osint 2.0.0
MAL-2025-48891 reversing-labs, kam193

Sep 22, 2025
PyPI
vielcord 0.0.7.5
MAL-2025-47510 oracle-using-macaron, kam193 2 IOCs

Sep 22, 2025
PyPI
cugraph-service-server 23.12.0, 0.0.1
MAL-2025-48889 reversing-labs, kam193

Sep 21, 2025
PyPI
tronhex 0.0.1
MAL-2025-48903 reversing-labs, kam193 4 IOCs

Sep 21, 2025
PyPI
readosso 0.1.3, 0.1.2, 0.1.0
MAL-2025-191852 kam193

Sep 20, 2025
PyPI
yuzo 1.0.0, 1.0.1, 1.0.2, 1.4.3
MAL-2025-48911 reversing-labs, kam193 1 IOC

Sep 19, 2025
PyPI
suyo 1.0.0, 1.1.0, 1.1.1, 1.2.0, 1.3.0, 1.3.2, 1.3.3, 1.3.4, 1.3.5, 1.3.6, 1.4, 1.4.…
MAL-2025-48898 reversing-labs, kam193 1 IOC

Sep 19, 2025
PyPI
termncolor 3.1.0
MAL-2025-47454 google-open-source-security

Sep 18, 2025
PyPI
colorinal 0.1.7
MAL-2025-47451 google-open-source-security

Sep 18, 2025
PyPI
libopenblas 0.7, 0.4.21, 0.3.21
MAL-2025-191780 kam193

Sep 18, 2025
PyPI
tronkeeppy 0.0.1
MAL-2025-48906 reversing-labs, kam193 4 IOCs

Sep 17, 2025
PyPI
tronkeep 0.0.1
MAL-2025-48905 reversing-labs, kam193 4 IOCs

Sep 17, 2025
PyPI
hackerone-app-sdk 0.18.0, 0.19.1, 0.17.0
MAL-2025-48892 reversing-labs, kam193

Sep 17, 2025
PyPI
veilcord-tls 0.0.7.5, 0.0.7.6
MAL-2025-47458 oracle-using-macaron

Sep 17, 2025
PyPI
terminalcolornew 0.0.3, 0.0.2, 0.0.1
MAL-2025-191892 kam193 1 IOC

Sep 16, 2025
PyPI
consolergbcolor 0.0.1
MAL-2025-48888 reversing-labs, kam193 1 IOC

Sep 15, 2025
PyPI
gtts-lts 2.5.8, 2.5.7, 2.5.6, 2.5.5, 2.5.4, 2.5.3, 2.5.2, 2.5.1
MAL-2025-191745 kam193 2 IOCs

Sep 15, 2025
PyPI
torchflow-experimental 0.3.0
MAL-2025-191907 kam193

Sep 15, 2025
PyPI
amd-taichi 1.0.0, 0.1.10, 0.1.9, 0.1.8, 0.1.7, 0.1.6, 0.1.5, 0.1.11, 0.1.12, 0.1.13
MAL-2025-191678 kam193

Sep 15, 2025
PyPI
mevguard 0.1.5
MAL-2025-47787 reversing-labs, kam193

Sep 14, 2025
PyPI
r-irkernel 2.1.1, 1.9.12
MAL-2025-191851 kam193

Sep 13, 2025
PyPI
pokemon-app-sdk 1.9.12, 0.17.0
MAL-2025-191815 kam193

Sep 13, 2025
PyPI
datetime-zones 0.2.0, 2.3.9, 0.1.0
MAL-2025-47756 reversing-labs, kam193

Sep 13, 2025
PyPI
tronkeypy 0.0.1
MAL-2025-47807 reversing-labs, kam193 4 IOCs

Sep 12, 2025