Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,161 npm 223,990 PyPI 12,021 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,021 reports · Feed

PyPI
loy 1.0.0
MAL-2025-41697 reversing-labs

Aug 28, 2025
PyPI
logging-python 0.0.0, 0.0.2
MAL-2025-41696 reversing-labs

Aug 28, 2025
PyPI
lightfm-ext 1.0
MAL-2025-41695 reversing-labs

Aug 28, 2025
PyPI
kfaction 0.0.2
MAL-2025-41694 reversing-labs

Aug 28, 2025
PyPI
jinja22 1.1.0
MAL-2025-41693 reversing-labs

Aug 28, 2025
PyPI
ironic-secureboot-driver 31463.0.0
MAL-2025-41692 reversing-labs

Aug 28, 2025
PyPI
iou3d 2.1
MAL-2025-41691 reversing-labs

Aug 28, 2025
PyPI
ilovemadpussy9 0.1.0
MAL-2025-41689 reversing-labs

Aug 28, 2025
PyPI
http-interact 3.0.0
MAL-2025-41685 reversing-labs

Aug 28, 2025
PyPI
hironobunigo 1.0
MAL-2025-41684 reversing-labs

Aug 28, 2025
PyPI
hera-mapmaking-visibilitysimulation 1.0
MAL-2025-41683 reversing-labs

Aug 28, 2025
PyPI
hellowpkg 1.0.4
MAL-2025-41682 reversing-labs

Aug 28, 2025
PyPI
gearbest-parser 2.0.7
MAL-2025-41680 reversing-labs

Aug 28, 2025
PyPI
gauravtest123 0.10
MAL-2025-41679 reversing-labs

Aug 28, 2025
PyPI
fquant 0.1.0
MAL-2025-41678 reversing-labs

Aug 28, 2025
PyPI
flyadmin 2.0.6
MAL-2025-41677 reversing-labs

Aug 28, 2025
PyPI
floogle 0.7
MAL-2025-41676 reversing-labs

Aug 28, 2025
PyPI
fiinquantx 0.1.0, 0.1.1, 0.1.2, 0.1.3, 0.1.4, 0.1.5
MAL-2025-41674 reversing-labs

Aug 28, 2025
PyPI
fiinquant-test 0.1.0
MAL-2025-41673 reversing-labs

Aug 28, 2025
PyPI
fiinquant 0.11.16, 0.11.18, 0.11.20, 0.11.22
MAL-2025-41672 reversing-labs

Aug 28, 2025
PyPI
fet 2.0.1
MAL-2025-41671 reversing-labs

Aug 28, 2025
PyPI
easy-https 0.1.4
MAL-2025-41670 reversing-labs

Aug 28, 2025
PyPI
e89-security 1.1
MAL-2025-41669 reversing-labs

Aug 28, 2025
PyPI
doughnuts 3.5.1, 3.6.0, 3.7.0, 3.8.0, 3.8.2, 4.0.0, 4.0.3, 4.3.0, 4.11.0, 4.11.2
MAL-2025-41665 reversing-labs

Aug 28, 2025
PyPI
dns-lexiconrequests-mock 0.2.64
MAL-2025-41663 reversing-labs

Aug 28, 2025
PyPI
discord-selfbot-v1422 0.1.3, 0.1.4
MAL-2025-41661 reversing-labs

Aug 28, 2025
PyPI
discord-application 7.2.7, 7.2.8
MAL-2025-41660 reversing-labs

Aug 28, 2025
PyPI
deepmountains-rce 0.0.1
MAL-2025-41659 reversing-labs

Aug 28, 2025
PyPI
decoratoroperations 0.0.3
MAL-2025-41658 reversing-labs

Aug 28, 2025
PyPI
dccs-bot 0.1
MAL-2025-41657 reversing-labs

Aug 28, 2025
PyPI
ctf-q21-empire-tmp-test125 9999.0.7
MAL-2025-41656 reversing-labs

Aug 28, 2025
PyPI
ctf-q21-empire-tmp-test124 9999.0.4
MAL-2025-41655 reversing-labs

Aug 28, 2025
PyPI
ctf-q21-empire-tmp-test123 99.0.1, 9999.0.4
MAL-2025-41654 reversing-labs

Aug 28, 2025
PyPI
ctf-q21-empire-tmp-t0pw1ns 100.0.15
MAL-2025-41653 reversing-labs

Aug 28, 2025
PyPI
ctf-q21-empire-tmp-t0pw1ng 100.0.0, 100.0.1, 100.0.2, 100.0.3, 100.0.4, 100.0.7, 100.0.8, 100.0.9, 100.0.10
MAL-2025-41652 reversing-labs

Aug 28, 2025
PyPI
ctf-q21-empire-tmp-bw31337 0.0.9
MAL-2025-41651 reversing-labs

Aug 28, 2025
PyPI
ctf-q21-empire-tmp-bw134349 0.0.1
MAL-2025-41650 reversing-labs

Aug 28, 2025
PyPI
ctf-q21-empire-tmp-bw134348 0.0.7
MAL-2025-41649 reversing-labs

Aug 28, 2025
PyPI
ctf-q21-empire-tmp-bw134347 0.0.11, 0.0.21
MAL-2025-41648 reversing-labs

Aug 28, 2025
PyPI
ctf-q21-empire-tmp-bw134345 0.0.1, 0.0.2
MAL-2025-41647 reversing-labs

Aug 28, 2025