Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,159 npm 223,989 PyPI 12,020 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,020 reports · Feed

PyPI
consolecolornew 0.0.6, 0.0.4, 0.0.3, 0.0.1, 0.0.5
MAL-2025-47754 reversing-labs, kam193 1 IOC

Sep 12, 2025
PyPI
tronkeyspy 0.0.1
MAL-2025-47808 reversing-labs, kam193 4 IOCs

Sep 12, 2025
PyPI
venomenallib 2.7.0, 0.1.3, 0.1.2, 0.1.1
MAL-2025-191920 kam193 4 IOCs

Sep 9, 2025
PyPI
zenomenallib 2.7.0
MAL-2025-47814 reversing-labs, kam193 4 IOCs

Sep 9, 2025
PyPI
denomenallib 2.7.0
MAL-2025-191716 kam193 4 IOCs

Sep 9, 2025
PyPI
fenomenallib 2.7.0
MAL-2025-191727 kam193 4 IOCs

Sep 9, 2025
PyPI
cti-ctf-challenges 0.1.2, 0.1.1, 0.1.0
MAL-2025-191709 kam193 1 IOC

Sep 9, 2025
PyPI
kekovayalibka 0.1.1
MAL-2025-191773 kam193 4 IOCs

Sep 8, 2025
PyPI
onnxruntime-winml 1.0.0
MAL-2025-191806 kam193 1 IOC

Sep 7, 2025
PyPI
private-evolution 1.0.0
MAL-2025-191817 kam193 1 IOC

Sep 7, 2025
PyPI
unicore 2.0.1, 2.0.0, 2, 1.2.0, 1.1.0
MAL-2025-191916 kam193 1 IOC

Sep 7, 2025
PyPI
brotli-python 99.3.1, 99.6.1, 99.99.1, 99.5.1, 99.2.1, 99.1.1, 1.9.12, 100.99.0, 1.0.9, 1.1.9…
MAL-2025-47749 reversing-labs, kam193

Sep 7, 2025
PyPI
netmanagement 0.1.1, 0.1.0
MAL-2025-191802 kam193

Sep 7, 2025
PyPI
amzn-sagemaker-studio 0.1.0
MAL-2025-191680 kam193 2 IOCs

Sep 7, 2025
PyPI
xenlib 0.1.1
MAL-2025-191936 kam193 4 IOCs

Sep 6, 2025
PyPI
giteegit 1.0.5, 1.0.4, 1.0.1, 1.0.0
MAL-2025-191739 kam193

Sep 6, 2025
PyPI
python-dev-toolkit 0.1.9
MAL-2025-191839 kam193 3 IOCs

Sep 3, 2025
PyPI
data-processing-utils 0.1.8
MAL-2025-47755 reversing-labs, kam193 3 IOCs

Sep 3, 2025
PyPI
awesome-tools-collection 0.1.0, 0.1.1, 0.1.2, 0.1.3, 0.1.4, 0.1.5, 0.1.6
MAL-2025-47746 reversing-labs, kam193 3 IOCs

Sep 3, 2025
PyPI
learning-pypi-demo-nisimi 0.1.3, 0.1.5, 0.1.4, 0.1.2, 0.1.1, 0.1.0
MAL-2025-47782 reversing-labs, kam193 3 IOCs

Sep 3, 2025
PyPI
nayzakishere 0.1.3
MAL-2025-191800 kam193 7 IOCs

Sep 3, 2025
PyPI
fromwherebitch 0.1.3
MAL-2025-191735 kam193 7 IOCs

Sep 3, 2025
PyPI
xwormclient 0.1.3
MAL-2025-191938 kam193 7 IOCs

Sep 3, 2025
PyPI
trongithpy 0.0.1
MAL-2025-47805 reversing-labs, kam193 4 IOCs

Sep 2, 2025
PyPI
doxer 0.1
MAL-2025-47759 reversing-labs, kam193 1 IOC

Sep 2, 2025
PyPI
testt-abc 99.0.1
MAL-2025-191896 kam193

Aug 30, 2025
PyPI
testt-test 1.0.2, 9.1.3, 99.0.1
MAL-2025-47802 reversing-labs, kam193

Aug 30, 2025
PyPI
fuckyoubitchbro 0.1.1
MAL-2025-191736 kam193 7 IOCs

Aug 30, 2025
PyPI
trongitpy 0.0.1
MAL-2025-47806 reversing-labs, kam193 4 IOCs

Aug 29, 2025
PyPI
license-checker 0.1.2, 0.1.3
MAL-2025-47784 reversing-labs, kam193 2 IOCs

Aug 29, 2025
PyPI
osanlizer 1.0.6, 1.0.7, 1.0.9
MAL-2025-47792 reversing-labs, kam193

Aug 29, 2025
PyPI
kraken123 0.4.0, 0.3.0, 0.2.0, 0.1.0, 0.5.0
MAL-2025-191778 kam193 1 IOC

Aug 29, 2025
PyPI
mulaptested-pakname 1.0.1, 1.0.0
MAL-2025-191796 kam193

Aug 28, 2025
PyPI
notary-client 3.6.0, 3.0.0
MAL-2025-191804 kam193

Aug 28, 2025
PyPI
tronwebwpy 0.0.1
MAL-2025-47810 reversing-labs, kam193 4 IOCs

Aug 28, 2025
PyPI
kraken-virus 0.1.0
MAL-2025-47780 reversing-labs, kam193 1 IOC

Aug 28, 2025
PyPI
krakenvirus 0.1.0
MAL-2025-47781 reversing-labs, kam193 1 IOC

Aug 28, 2025
PyPI
iamenumerat 1.0.0
MAL-2025-47773 reversing-labs, kam193 4 IOCs

Aug 28, 2025
PyPI
zlib1g-dev 99.99.99
MAL-2025-41804 reversing-labs

Aug 28, 2025
PyPI
zking 0.2, 0.3
MAL-2025-41803 reversing-labs

Aug 28, 2025