Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,161 npm 223,990 PyPI 12,021 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,021 reports · Feed

PyPI
ctf-q21-empire-tmp-bw126916 0.0.10
MAL-2025-41646 reversing-labs

Aug 28, 2025
PyPI
ctf-q21-empire-tmp-bw126616 0.0.8, 0.0.9, 0.0.10, 1
MAL-2025-41645 reversing-labs

Aug 28, 2025
PyPI
ctf-q21-empire-tmp-bw121116 0.0.2
MAL-2025-41644 reversing-labs

Aug 28, 2025
PyPI
ctf-bakayaro 0.0.1, 0.0.2, 0.0.3
MAL-2025-41643 reversing-labs

Aug 28, 2025
PyPI
crowdnav 1.0
MAL-2025-41642 reversing-labs

Aug 28, 2025
PyPI
continuoustimemarkovmodel 3.1.0
MAL-2025-41641 reversing-labs

Aug 28, 2025
PyPI
config4py 0.0.1, 0.0.2, 0.0.3, 0.0.4, 0.0.5, 0.0.16, 0.0.18, 0.0.20, 0.0.21
MAL-2025-41640 reversing-labs

Aug 28, 2025
PyPI
conda-package-handling111 3.0.0
MAL-2025-41639 reversing-labs

Aug 28, 2025
PyPI
change-user-agent 5.31.6
MAL-2025-41638 reversing-labs

Aug 28, 2025
PyPI
certufi 2022.12.7
MAL-2025-41637 reversing-labs

Aug 28, 2025
PyPI
certifo 2022.12.7
MAL-2025-41636 reversing-labs

Aug 28, 2025
PyPI
certifiy 2022.12.7
MAL-2025-41635 reversing-labs

Aug 28, 2025
PyPI
certifiq 2022.12.7
MAL-2025-41634 reversing-labs

Aug 28, 2025
PyPI
certifij 2022.12.7
MAL-2025-41633 reversing-labs

Aug 28, 2025
PyPI
certifii 2022.12.7
MAL-2025-41632 reversing-labs

Aug 28, 2025
PyPI
certifia 2022.12.7
MAL-2025-41631 reversing-labs

Aug 28, 2025
PyPI
certiffi 2022.12.7
MAL-2025-41630 reversing-labs

Aug 28, 2025
PyPI
ceritfi 2022.12.7
MAL-2025-41629 reversing-labs

Aug 28, 2025
PyPI
celery-routr 1.0.0
MAL-2025-41628 reversing-labs

Aug 28, 2025
PyPI
bp2hookutil 3.3.0
MAL-2025-41627 reversing-labs

Aug 28, 2025
PyPI
botclient 7.3.5
MAL-2025-41626 reversing-labs

Aug 28, 2025
PyPI
beautifulsoup4-new 4.12.11
MAL-2025-41624 reversing-labs

Aug 28, 2025
PyPI
beautifulsoup-new 3.0.0
MAL-2025-41623 reversing-labs

Aug 28, 2025
PyPI
azure-iothub-service-client 1.3.5
MAL-2025-41622 reversing-labs

Aug 28, 2025
PyPI
apple-tv-new 1.0.0
MAL-2025-41620 reversing-labs

Aug 28, 2025
PyPI
airtime-media-monitor 1.0
MAL-2025-41619 reversing-labs

Aug 28, 2025
PyPI
aiohttp-proxies-forked 0.1.65
MAL-2025-41618 reversing-labs

Aug 28, 2025
PyPI
aiohttp-proxies-fork 0.1.62
MAL-2025-41617 reversing-labs

Aug 28, 2025
PyPI
aiohttp-proxies-connector 0.2.15, 0.2.21, 0.2.22, 0.2.28, 0.2.35, 0.2.46, 0.2.53, 0.2.56, 0.2.57
MAL-2025-41616 reversing-labs

Aug 28, 2025
PyPI
abilityrequests 0.0.5, 0.0.6
MAL-2025-41615 reversing-labs

Aug 28, 2025
PyPI
python-datetil 1.1.0, 1.1.2
MAL-2025-47798 reversing-labs, kam193

Aug 28, 2025
PyPI
python-dateitil 0.1.2
MAL-2025-47797 reversing-labs, kam193

Aug 27, 2025
PyPI
import-license-checker 0.1.1, 0.1.0
MAL-2025-191765 kam193 2 IOCs

Aug 26, 2025
PyPI
xx-ent-wiki-sm 99.2.2, 99.1.2, 99.1.1, 99.0.0
MAL-2025-191939 kam193

Aug 25, 2025
PyPI
selenium-stealth-utils 2.0.3, 2.0.2, 2.0.1, 2.0.0, 2.0.5, 2.0.7, 2.0.8, 2.0.9, 2.1.0, 2.1.3, 2.1.4, 2.…
MAL-2025-191866 kam193 4 IOCs

Aug 25, 2025
PyPI
enumeratiam 0.0.3, 0.0.4
MAL-2025-47763 reversing-labs, kam193 4 IOCs

Aug 25, 2025
PyPI
hydenmj 0.1.1
MAL-2025-47772 reversing-labs, kam193 7 IOCs

Aug 24, 2025
PyPI
comedrivewithmeman 0.1.3
MAL-2025-47753 reversing-labs, kam193 7 IOCs

Aug 24, 2025
PyPI
fifam5tl 0.1.1
MAL-2025-47765 reversing-labs, kam193 7 IOCs

Aug 24, 2025
PyPI
fucknuker 0.1.1
MAL-2025-47768 reversing-labs, kam193 7 IOCs

Aug 24, 2025