Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,162 npm 223,990 PyPI 12,022 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,022 reports · Feed

PyPI
polidoro-cli 0.0.1
MAL-2025-6568 reversing-labs

Jul 31, 2025
PyPI
plural 0.0.1
MAL-2025-6567 reversing-labs

Jul 31, 2025
PyPI
phishermanx 4.0.1
MAL-2025-6563 reversing-labs

Jul 31, 2025
PyPI
pb-common 0.0.1
MAL-2025-6562 reversing-labs

Jul 31, 2025
PyPI
ouc-api 0.0.1
MAL-2025-6561 reversing-labs

Jul 31, 2025
PyPI
optext-python 0.0.1
MAL-2025-6560 reversing-labs

Jul 31, 2025
PyPI
oca-pylint-plugin 0.0.1
MAL-2025-6559 reversing-labs

Jul 31, 2025
PyPI
neptune-cli 0.0.1
MAL-2025-6557 reversing-labs

Jul 31, 2025
PyPI
napari-flowering-apple-tree-pixel-classification 0.0.1
MAL-2025-6556 reversing-labs

Jul 31, 2025
PyPI
nanamilang 0.0.1
MAL-2025-6555 reversing-labs

Jul 31, 2025
PyPI
mytoolsfun 0.0.1, 0.0.2
MAL-2025-6554 reversing-labs

Jul 31, 2025
PyPI
myfuntools 0.1.1, 0.1.2, 0.1.3, 0.1.3.1, 0.1.3.2, 0.1.3.3, 0.1.3.4, 0.1.3.5, 0.1.3.6, 0.1.…
MAL-2025-6553 reversing-labs

Jul 31, 2025
PyPI
moxel-python-driver 0.0.1
MAL-2025-6550 reversing-labs

Jul 31, 2025
PyPI
mb-commons 0.0.1
MAL-2025-6546 reversing-labs

Jul 31, 2025
PyPI
loggutils 0.1.0
MAL-2025-6539 reversing-labs

Jul 31, 2025
PyPI
localstack-plugin-persistence 0.0.1
MAL-2025-6537 reversing-labs

Jul 31, 2025
PyPI
libfwupdplugin1 9.0.0, 2.0.0, 1.0.0
MAL-2025-6535 reversing-labs

Jul 31, 2025
PyPI
leip 0.0.1
MAL-2025-6534 reversing-labs

Jul 31, 2025
PyPI
kwargs 0.0.1
MAL-2025-6533 reversing-labs

Jul 31, 2025
PyPI
karma-jasmine-sinon 2.1.1
MAL-2025-6532 reversing-labs

Jul 31, 2025
PyPI
jmdrs 1.0.6, 1.0.5, 1.0.4
MAL-2025-6530 reversing-labs

Jul 31, 2025
PyPI
hyperon-das-atomdb 0.0.1
MAL-2025-6523 reversing-labs

Jul 31, 2025
PyPI
graphlibx 3.5.10, 3.5.11, 3.5.12
MAL-2025-6518 reversing-labs

Jul 31, 2025
PyPI
graphex 3.5.7, 3.5.8, 3.5.9, 3.5.10
MAL-2025-6517 reversing-labs

Jul 31, 2025
PyPI
graphalgo 3.5.1rc0.dev0, 3.5.2, 3.5.3, 3.5.5, 3.5.6
MAL-2025-6514 reversing-labs

Jul 31, 2025
PyPI
gcdt-bundler 0.0.1
MAL-2025-6509 reversing-labs

Jul 31, 2025
PyPI
flexiconf 0.0.1
MAL-2025-6507 reversing-labs

Jul 31, 2025
PyPI
filesystem-python 0.0.1
MAL-2025-6506 reversing-labs

Jul 31, 2025
PyPI
file-writer-control 0.0.1
MAL-2025-6505 reversing-labs

Jul 31, 2025
PyPI
fastybird-triggers-module 0.0.1
MAL-2025-6504 reversing-labs

Jul 31, 2025
PyPI
fastybird-redisdb-exchange-plugin 0.0.1
MAL-2025-6503 reversing-labs

Jul 31, 2025
PyPI
fastybird-devices-module 0.0.1
MAL-2025-6502 reversing-labs

Jul 31, 2025
PyPI
exorigsim 0.1.0
MAL-2025-6501 reversing-labs

Jul 31, 2025
PyPI
ensmallen-graph 0.0.1
MAL-2025-6500 reversing-labs

Jul 31, 2025
PyPI
duc193 0.1.0
MAL-2025-6498 reversing-labs

Jul 31, 2025
PyPI
ds-lime 0.0.1
MAL-2025-6497 reversing-labs

Jul 31, 2025
PyPI
dfshoesadsm 0.1
MAL-2025-6494 reversing-labs

Jul 31, 2025
PyPI
deeprce 0.0.1
MAL-2025-6493 reversing-labs

Jul 31, 2025
PyPI
crawl-requests 0.0.1
MAL-2025-6485 reversing-labs

Jul 31, 2025
PyPI
cppython-core 0.0.1
MAL-2025-6484 reversing-labs

Jul 31, 2025