Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,161 npm 223,990 PyPI 12,021 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,021 reports · Feed

  • PyPI
    zking 0.2, 0.3
    MAL-2025-41803 reversing-labs
  • PyPI
    youtube-new 2.2.1
    MAL-2025-41801 reversing-labs
  • PyPI
    xorg-renderproto 0.11.1
    MAL-2025-41800 reversing-labs
  • PyPI
    xoloyuaezcqixu 0.0.0
    MAL-2025-41799 reversing-labs
  • PyPI
    xoloowlowpzeke 0.0.0
    MAL-2025-41798 reversing-labs
  • PyPI
    xolonavrylpbeb 0.0.0
    MAL-2025-41797 reversing-labs
  • PyPI
    xolofyxkotqwko 0.0.0
    MAL-2025-41796 reversing-labs
  • PyPI
    xoloazfgyobkaw 0.0.0
    MAL-2025-41795 reversing-labs
  • PyPI
    web5 1.0.0
    MAL-2025-41794 reversing-labs
  • PyPI
    virtualebv 20.16.4
    MAL-2025-41793 reversing-labs
  • PyPI
    uploder-rubika 1.3.0
    MAL-2025-41792 reversing-labs
  • PyPI
    upgrade-requests 3.0.0
    MAL-2025-41791 reversing-labs
  • PyPI
    toolbelt-requests 0.0.1
    MAL-2025-41784 reversing-labs
  • PyPI
    tkinnter2 3.22.6
    MAL-2025-41783 reversing-labs
  • PyPI
    tkinnter 3.22.6
    MAL-2025-41782 reversing-labs
  • PyPI
    this-is-vvvv 0.1
    MAL-2025-41779 reversing-labs
  • PyPI
    tf-nightly-2-0-preview 2.0.1
    MAL-2025-41778 reversing-labs
  • PyPI
    testcase100 1.0
    MAL-2025-41774 reversing-labs
  • PyPI
    test-tetdssa 1.0.0
    MAL-2025-41773 reversing-labs
  • PyPI
    telemaster 1.1.0
    MAL-2025-41772 reversing-labs
  • PyPI
    telegrampremiumfix 1.7.2, 1.7.3, 1.7.4, 1.7.5, 1.7.6
    MAL-2025-41771 reversing-labs
  • PyPI
    steembase 1.5.0
    MAL-2025-41769 reversing-labs
  • PyPI
    spykes 2.0.1
    MAL-2025-41767 reversing-labs
  • PyPI
    spoof-user-agent 5.31.6
    MAL-2025-41766 reversing-labs
  • PyPI
    speedyrequests 0.0.1
    MAL-2025-41765 reversing-labs
  • PyPI
    some-other-package 1.0.0
    MAL-2025-41763 reversing-labs
  • PyPI
    solution-maker 0.1.6
    MAL-2025-41762 reversing-labs
  • PyPI
    smartsheet 3.1.0
    MAL-2025-41761 reversing-labs
  • PyPI
    scraperworldapi 1.0
    MAL-2025-41759 reversing-labs
  • PyPI
    sample-module 0.0.1
    MAL-2025-41758 reversing-labs
  • PyPI
    rubyreq 2, 3, 6, 7
    MAL-2025-41757 reversing-labs
  • PyPI
    rtxt-dep1 0.1
    MAL-2025-41754 reversing-labs
  • PyPI
    rsacracker 0.1.0
    MAL-2025-41753 reversing-labs
  • PyPI
    rqrqrq 1.0.0
    MAL-2025-41752 reversing-labs
  • PyPI
    rq-websites 3.0.0
    MAL-2025-41751 reversing-labs
  • PyPI
    ros2-demo-py 1.2
    MAL-2025-41750 reversing-labs
  • PyPI
    rickquests 3.0.1, 3.0.2, 3.1.0
    MAL-2025-41749 reversing-labs
  • PyPI
    reversepkg 0.1
    MAL-2025-41748 reversing-labs
  • PyPI
    requests-util 2.4.0
    MAL-2025-41746 reversing-labs
  • PyPI
    requests-beta 2.26.1
    MAL-2025-41745 reversing-labs