Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 240,435 npm 223,272 PyPI 12,014 RubyGems 4,319 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,014 reports · Feed

PyPI
batchspar 0.1.0
MAL-2026-18135 kam193, amazon-inspector

Oct 21, 2026
PyPI
crenelatts 0.1.0
MAL-2026-18138 kam193, amazon-inspector

Oct 21, 2026
PyPI
journey-test-hellospy 0.1.1
MAL-2026-18133 kam193 2 IOCs

Oct 21, 2026
PyPI
libseal 1.1.0, 1.1.1, 1.1.2, 1.1.3
MAL-2026-18132 kam193, amazon-inspector

Oct 21, 2026
PyPI
iterquarry 2.1.1, 2.1.2, 2.1.3, 2.1.4, 2.2.0, 2.2.1
MAL-2026-18131 kam193, amazon-inspector

Oct 21, 2026
PyPI
journey-test-helloshell 0.2.0
MAL-2026-18124 kam193, amazon-inspector 2 IOCs

Oct 21, 2026
PyPI
moveworks-capi-starter 0.0.0, 0.2.0
MAL-2026-18122 kam193, amazon-inspector

Oct 21, 2026
PyPI
ssemver 1.0.0
MAL-2026-18119 kam193 2 IOCs

Oct 20, 2026
PyPI
semer 1.0.0
MAL-2026-18118 kam193 2 IOCs

Oct 20, 2026
PyPI
debbug 1.0.0
MAL-2026-18116 kam193 2 IOCs

Oct 20, 2026
PyPI
deebug 1.0.0
MAL-2026-18117 kam193 2 IOCs

Oct 20, 2026
PyPI
hijok-lampam 1.0.0
MAL-2026-18112 kam193, amazon-inspector 3 IOCs

Oct 20, 2026
PyPI
trijigo-kalip 1.0.0
MAL-2026-18114 kam193

Oct 20, 2026
PyPI
jiklpo-tsunari-kay 1.0.0
MAL-2026-18113 kam193, amazon-inspector 3 IOCs

Oct 20, 2026
PyPI
hijiko-pilaka 1.0.0
MAL-2026-18111 kam193, amazon-inspector 3 IOCs

Oct 20, 2026
PyPI
facewareretargeter 9.9.9
MAL-2026-18110 kam193, amazon-inspector 3 IOCs

Oct 20, 2026
PyPI
semvver 1.0.0
MAL-2026-18104 amazon-inspector, kam193 2 IOCs

Oct 20, 2026
PyPI
semveer 1.0.0
MAL-2026-18102 amazon-inspector, kam193 2 IOCs

Oct 20, 2026
PyPI
semmver 1.0.0
MAL-2026-18101 amazon-inspector, kam193 2 IOCs

Oct 20, 2026
PyPI
semverr 1.0.0
MAL-2026-18103 amazon-inspector, kam193 2 IOCs

Oct 20, 2026
PyPI
security-research-startup-snapshot-810764b303 0.1.0
MAL-2026-18098 kam193

Oct 20, 2026
PyPI
research-probe-6150c1c915 0.1.0
MAL-2026-18097 kam193, amazon-inspector

Oct 20, 2026
PyPI
workalender 17.1.0.dev0
MAL-2026-18096 kam193

Oct 20, 2026
PyPI
pafex 2.3
MAL-2026-18094 kam193, amazon-inspector 3 IOCs

Oct 20, 2026
PyPI
resion 22.0.1
MAL-2026-18095 kam193, amazon-inspector 3 IOCs

Oct 20, 2026
PyPI
workcalender 17.1.0.dev0
MAL-2026-18093 kam193, amazon-inspector

Oct 20, 2026
PyPI
test-workalendar-internal 0.0.1, 0.0.2, 0.0.3
MAL-2026-18092 kam193, amazon-inspector

Oct 20, 2026
PyPI
asurion 99.0.0
MAL-2026-18045 kam193, amazon-inspector

Oct 19, 2026
PyPI
vinted-mocked-apis 99.0.0
MAL-2026-17943 ossf-package-analysis, kam193

Oct 19, 2026
PyPI
fabdeploycheck 0.1.1
MAL-2026-17926 amazon-inspector, kam193 1 IOC

Oct 19, 2026
PyPI
fabtoolkit 0.1.2, 0.1.1, 0.1.0, 0.2.1, 0.2.0
MAL-2026-17927 amazon-inspector, kam193 1 IOC

Oct 19, 2026
PyPI
leakdeep 2.6.4, 2.5.0, 2.6.6, 2.5.2, 2.6.0, 2.4.1, 2.4.5, 2.6.2, 3.0.0
MAL-2026-17921 amazon-inspector, kam193

Oct 18, 2026
PyPI
tonemaptts 0.1.0
MAL-2026-17918 kam193, amazon-inspector

Oct 17, 2026
PyPI
pyrechoasr 0.1.0
MAL-2026-17916 kam193, amazon-inspector

Oct 17, 2026
PyPI
driftwavets 0.1.0
MAL-2026-17912 kam193, amazon-inspector

Oct 17, 2026
PyPI
novalithtts 0.1.0
MAL-2026-17915 kam193, amazon-inspector

Oct 17, 2026
PyPI
voltswannts 0.1.0
MAL-2026-17920 kam193, amazon-inspector

Oct 17, 2026
PyPI
glassbeakasr 0.1.0
MAL-2026-17914 kam193, amazon-inspector

Oct 17, 2026
PyPI
emberlytts 0.1.0
MAL-2026-17913 kam193, amazon-inspector

Oct 17, 2026
PyPI
quasitonnts 0.1.0
MAL-2026-17917 kam193, amazon-inspector

Oct 17, 2026