Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,161 npm 223,990 PyPI 12,021 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,021 reports · Feed

PyPI
caas-jupyter-tools 0.0.2
MAL-2025-191697 kam193

Aug 19, 2025
PyPI
binance-sdk-ebate 10.0.0
MAL-2025-47747 reversing-labs, kam193

Aug 18, 2025
PyPI
flatfox-api-python 0.3, 0.2, 0.1
MAL-2025-6973 ossf-package-analysis, kam193

Aug 18, 2025
PyPI
svcmanagement 1.0.0
MAL-2025-47801 reversing-labs, kam193 2 IOCs

Aug 18, 2025
PyPI
swiv 0.4, 4.0.0, 0.3, 0.0.1
MAL-2025-6897 ossf-package-analysis, kam193

Aug 18, 2025
PyPI
flask-tdg-cyberx 3.300.40, 3.300.39, 3.100.2, 1.0.1, 3.300.41
MAL-2025-191732 kam193 2 IOCs

Aug 17, 2025
PyPI
pytensorlite 0.1.0, 0.1.1, 0.1.2, 0.1.3, 0.1.4
MAL-2025-47795 reversing-labs, kam193 1 IOC

Aug 17, 2025
PyPI
titifel-pyip 7.0.0, 8.0.0, 6.0.0
MAL-2025-47803 reversing-labs, kam193

Aug 15, 2025
PyPI
libgomp 0.1.1, 1.1.5, 1.1.4, 1.1.3, 1.1.1, 0.1.0
MAL-2025-47783 reversing-labs, kam193

Aug 15, 2025
PyPI
iamenumerate 1.0.0, 1.0.1
MAL-2025-41688 reversing-labs, kam193 4 IOCs

Aug 14, 2025
PyPI
jsonist 0.1.0
MAL-2025-191767 kam193 2 IOCs

Aug 14, 2025
PyPI
titifel-pypi 0.0.1, 1.0.0, 2.0.1, 5.0.0, 4.0.0, 3.0.0
MAL-2025-47804 reversing-labs, kam193

Aug 14, 2025
PyPI
browser-run 0.1.0, 0.2.0, 0.3.0
MAL-2025-191696 kam193 2 IOCs

Aug 14, 2025
PyPI
st-py-de-cli 1.9.9
MAL-2025-41768 reversing-labs, kam193

Aug 13, 2025
PyPI
pycrackhash 0.1.1, 0.1.2
MAL-2025-191832 kam193 1 IOC

Aug 13, 2025
PyPI
iamenumer 1.0.0
MAL-2025-41687 reversing-labs, kam193 4 IOCs

Aug 12, 2025
PyPI
aws-enumerate 1.0.0
MAL-2025-41621 reversing-labs, kam193 4 IOCs

Aug 12, 2025
PyPI
kertash 0.1.5, 0.1.4
MAL-2025-191774 kam193 1 IOC

Aug 12, 2025
PyPI
flask-tdg-cyber 0.0.7, 0.0.8, 1.0.1, 3.100.2, 3.300.39, 0.0.6, 0.0.5, 0.0.4, 0.0.3, 0.0.2, 0.0.1
MAL-2025-41675 reversing-labs, kam193 2 IOCs

Aug 11, 2025
PyPI
tronapihelper 0.1.0
MAL-2025-191911 kam193 1 IOC

Aug 10, 2025
PyPI
permsupping 1.0.0
MAL-2025-41717 reversing-labs, kam193 1 IOC

Aug 9, 2025
PyPI
w3shi-h1 0.0.1, 0.0.2, 0.0.3
MAL-2025-191923 kam193

Aug 8, 2025
PyPI
packed-w3shi 0.0.1
MAL-2025-191809 kam193

Aug 8, 2025
PyPI
raknet-testing-package2 0.0.1, 0.0.2, 0.0.3
MAL-2025-41730 reversing-labs, kam193 3 IOCs

Aug 7, 2025
PyPI
raknet-testing-package 0.0.3, 0.0.4, 0.0.5, 0.0.6, 0.0.1, 0.0.2
MAL-2025-41729 reversing-labs, kam193 3 IOCs

Aug 7, 2025
PyPI
tronapisync 0.1.1, 1.0.1, 1.0.2, 1.0.0
MAL-2025-41787 reversing-labs, kam193 1 IOC

Aug 6, 2025
PyPI
httpsyncer 1.0.0
MAL-2025-41686 reversing-labs, kam193 2 IOCs

Aug 6, 2025
PyPI
flashsimplelogger 0.1.0, 0.2.0
MAL-2025-191729 kam193 3 IOCs

Aug 5, 2025
PyPI
trongridapi 0.0.1
MAL-2025-41788 reversing-labs, kam193 4 IOCs

Aug 5, 2025
PyPI
discordsync 1.3.0, 1.4.0
MAL-2025-41662 reversing-labs, kam193 2 IOCs

Aug 4, 2025
PyPI
bh-25-req-ase 0.0.3
MAL-2025-191690 kam193 1 IOC

Aug 4, 2025
PyPI
thisisthedaventestz 99.99.99
MAL-2025-41781 reversing-labs, kam193

Aug 4, 2025
PyPI
zhopaorlaaato 1.2.0
MAL-2025-41802 reversing-labs, kam193 2 IOCs

Aug 4, 2025
PyPI
sisaws 2.1.6
MAL-2025-47453 google-open-source-security, kam193 2 IOCs

Aug 4, 2025
PyPI
thisisthedaventest 99.99.99
MAL-2025-41780 reversing-labs, kam193

Aug 3, 2025
PyPI
totallysafe 2.0.1, 2.0.0
MAL-2025-41785 reversing-labs, kam193

Aug 3, 2025
PyPI
dsodelib 1.1.0
MAL-2025-41667 reversing-labs, kam193 2 IOCs

Aug 3, 2025
PyPI
dziplib 1.0.0, 1.2.0
MAL-2025-41668 reversing-labs, kam193 2 IOCs

Aug 3, 2025
PyPI
dsidelib 0.1.0, 0.1.1, 0.2.0, 0.3.0, 0.4.0, 1.0.0, 1.1.0, 1.2.0, 1.3.0, 2.0, 0.5.0, 0.6.…
MAL-2025-41666 reversing-labs, kam193 2 IOCs

Aug 3, 2025
PyPI
secmeasure 0.1.0, 0.1.1, 0.1.2
MAL-2025-47452 google-open-source-security, kam193 2 IOCs

Aug 3, 2025