Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,162 npm 223,990 PyPI 12,022 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,022 reports · Feed

PyPI
secmeasure 0.1.0, 0.1.1, 0.1.2
MAL-2025-47452 google-open-source-security, kam193 2 IOCs

Aug 3, 2025
PyPI
supersafepackage 3.0.0, 3.0.5, 3.0.6, 4.0.0, 4.0.1, 5.0.0, 6.0.0, 6.0.1, 2.0.0, 3.0.1
MAL-2025-41770 reversing-labs, kam193

Aug 2, 2025
PyPI
bh-usa-req-ase 0.0.3
MAL-2025-191692 kam193 1 IOC

Aug 2, 2025
PyPI
bh-usa-automate-req-ase 0.0.3
MAL-2025-191691 kam193 1 IOC

Aug 2, 2025
PyPI
tsesyx 10.0.5
MAL-2025-41790 reversing-labs, kam193

Aug 2, 2025
PyPI
web3dummycti 0.1.0
MAL-2025-191928 kam193 1 IOC

Aug 2, 2025
PyPI
req-ase-automate 0.0.3
MAL-2025-191854 kam193 1 IOC

Aug 2, 2025
PyPI
req-pre-automate 0.0.3
MAL-2025-191855 kam193 1 IOC

Aug 2, 2025
PyPI
req-pre-automate1 0.0.3
MAL-2025-191856 kam193 1 IOC

Aug 2, 2025
PyPI
loggerex 0.7.4, 0.7.6, 0.7.5
MAL-2025-191782 kam193 3 IOCs

Aug 1, 2025
PyPI
supersafereverse 2.0.0
MAL-2025-191882 kam193

Aug 1, 2025
PyPI
loquru 0.7.3
MAL-2025-191784 kam193 3 IOCs

Aug 1, 2025
PyPI
prof-tg-dooorto-qu 0.0.1
MAL-2025-191824 kam193

Jul 31, 2025
PyPI
num2words 0.5.15, 0.5.16
MAL-2025-6794 google-open-source-security, ghsa-malware

Jul 31, 2025
PyPI
zlsrc 0.0.1
MAL-2025-6626 reversing-labs

Jul 31, 2025
PyPI
zlapp 0.0.1
MAL-2025-6625 reversing-labs

Jul 31, 2025
PyPI
zipf 0.0.1
MAL-2025-6624 reversing-labs

Jul 31, 2025
PyPI
ziggonext 0.0.1
MAL-2025-6623 reversing-labs

Jul 31, 2025
PyPI
wallets-utils 0.1.0
MAL-2025-6616 reversing-labs

Jul 31, 2025
PyPI
utils-wallet 0.1.0
MAL-2025-6612 reversing-labs

Jul 31, 2025
PyPI
tulipgui-python 0.0.1
MAL-2025-6611 reversing-labs

Jul 31, 2025
PyPI
torrent-tracker-scraper 0.0.1
MAL-2025-6603 reversing-labs

Jul 31, 2025
PyPI
torchao-nightly 0.0.1
MAL-2025-6602 reversing-labs

Jul 31, 2025
PyPI
thoughtspot-rest-api-sdk 0.0.1
MAL-2025-6601 reversing-labs

Jul 31, 2025
PyPI
terraform-binary-wheel 0.0.1
MAL-2025-6599 reversing-labs

Jul 31, 2025
PyPI
support-developer 0.0.1
MAL-2025-6597 reversing-labs

Jul 31, 2025
PyPI
spokeoapi 0.1.0, 0.1.1, 0.1.2, 0.1.3, 0.1.4
MAL-2025-6595 reversing-labs

Jul 31, 2025
PyPI
spl-transpiler 0.0.1
MAL-2025-6593 reversing-labs

Jul 31, 2025
PyPI
sparsify-nightly 0.0.1
MAL-2025-6592 reversing-labs

Jul 31, 2025
PyPI
sparsezoo-nightly 0.0.1
MAL-2025-6591 reversing-labs

Jul 31, 2025
PyPI
sparseml-nightly 0.0.1
MAL-2025-6590 reversing-labs

Jul 31, 2025
PyPI
solidity-coverage 2.1.1
MAL-2025-6589 reversing-labs

Jul 31, 2025
PyPI
sodha 4.0.0
MAL-2025-6587 reversing-labs

Jul 31, 2025
PyPI
saga-python 0.0.1
MAL-2025-6581 reversing-labs

Jul 31, 2025
PyPI
runway-python 0.0.1, 999.0.0, 999.0.1
MAL-2025-6579 reversing-labs, ossf-package-analysis, kam193

Jul 31, 2025
PyPI
research-learn 0.0.1
MAL-2025-6577 reversing-labs

Jul 31, 2025
PyPI
repocket 0.0.1
MAL-2025-6576 reversing-labs

Jul 31, 2025
PyPI
reade 0.1
MAL-2025-6574 reversing-labs

Jul 31, 2025
PyPI
rctorchprivate 0.0.1
MAL-2025-6573 reversing-labs

Jul 31, 2025
PyPI
pyrofork-dev 0.0.1
MAL-2025-6572 reversing-labs

Jul 31, 2025