Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,162 npm 223,990 PyPI 12,022 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,022 reports · Feed

PyPI
prof-qu 2, 0.0.1
MAL-2025-191819 kam193

Jul 25, 2025
PyPI
prof-tgqu 1
MAL-2025-191829 kam193

Jul 25, 2025
PyPI
prof-quotex 0.0.1, 0.0.2, 0.0.3, 0.0.4
MAL-2025-191820 kam193

Jul 25, 2025
PyPI
m5tlprovetomegz 0.1.0, 0.1.1
MAL-2025-41699 reversing-labs, kam193 1 IOC

Jul 24, 2025
PyPI
req-ase 0.0.3
MAL-2025-191853 kam193 1 IOC

Jul 24, 2025
PyPI
testpackageroietest4 0.1.0
MAL-2025-41777 reversing-labs, kam193

Jul 21, 2025
PyPI
donotinstallthisistest5 0.1.0
MAL-2025-41664 reversing-labs, kam193

Jul 21, 2025
PyPI
donotinstallthisistest6 1.0.0
MAL-2025-6213 ossf-package-analysis, kam193

Jul 21, 2025
PyPI
set7 1.0.0, 1.0.1, 1.0.2, 1.0.4, 1.0.5, 1.0.7
MAL-2025-41760 reversing-labs, kam193 1 IOC

Jul 21, 2025
PyPI
ruamel-poc 0.17.16, 1.17.16
MAL-2025-6010 ossf-package-analysis, kam193

Jul 20, 2025
PyPI
hahabott 1.20.1, 1.20.6, 1.20.7, 1.20.8, 1.20.9, 1.29.1, 1.29.3
MAL-2025-191746 kam193

Jul 19, 2025
PyPI
aphorism-lib 1.0.0
MAL-2025-191683 kam193

Jul 19, 2025
PyPI
lazmat 1.0.0
MAL-2025-191779 kam193

Jul 19, 2025
PyPI
hkmat 1.0.0
MAL-2025-191759 kam193

Jul 19, 2025
PyPI
hekamhelp 1.0.0
MAL-2025-191750 kam193

Jul 19, 2025
PyPI
talbat 1.0.0
MAL-2025-191885 kam193

Jul 19, 2025
PyPI
rbx1325382 0.1.0
MAL-2025-41735 reversing-labs, kam193

Jul 18, 2025
PyPI
rbx1325 0.1.0
MAL-2025-41734 reversing-labs, kam193

Jul 18, 2025
PyPI
blabutt 99.99.99
MAL-2025-41625 reversing-labs, kam193

Jul 18, 2025
PyPI
groq-mcp 9.9.9, 0.0.1
MAL-2025-6007 ossf-package-analysis, kam193

Jul 18, 2025
PyPI
svcmanager 1.0.1
MAL-2025-191883 kam193 2 IOCs

Jul 18, 2025
PyPI
avatar-handler 1.0.0
MAL-2025-191685 kam193

Jul 17, 2025
PyPI
memorylib 2.0.0
MAL-2025-6548 reversing-labs, kam193 1 IOC

Jul 16, 2025
PyPI
memtools 2.0.0
MAL-2025-6549 reversing-labs, kam193 1 IOC

Jul 16, 2025
PyPI
vramx 1.6.2, 1.6.3
MAL-2025-6614 reversing-labs, kam193 1 IOC

Jul 16, 2025
PyPI
memlib 2.0.0
MAL-2025-6547 reversing-labs, kam193 1 IOC

Jul 16, 2025
PyPI
logghelper 1.0.0
MAL-2025-6538 reversing-labs, kam193 1 IOC

Jul 16, 2025
PyPI
testcatplzignore 0.0.1
MAL-2025-191893 kam193

Jul 16, 2025
PyPI
python-uvicorn 0.35.0, 0.35.1, 0.36.0, 0.36.1
MAL-2025-191842 kam193

Jul 16, 2025
PyPI
iscc-flag 0.0.1
MAL-2025-6527 reversing-labs, kam193

Jul 16, 2025
PyPI
anku1-rce 0.0.1
MAL-2025-6432 reversing-labs, kam193

Jul 16, 2025
PyPI
anku2-rce 0.0.1, 0.0.2
MAL-2025-6433 reversing-labs, kam193

Jul 16, 2025
PyPI
crto0 1.0.7
MAL-2025-6487 reversing-labs, kam193 2 IOCs

Jul 15, 2025
PyPI
vtk-osmesa 900.548.735, 900.548.736, 900.548.746, 900.548.744, 900.548.751, 900.548.747, 0…
MAL-2025-5847 ossf-package-analysis, kam193 1 IOC

Jul 14, 2025
PyPI
paradox-pydevdeps 0.0.1
MAL-2025-191811 kam193

Jul 14, 2025
PyPI
crto5 0.2.0, 0.1.0, 0.5.0
MAL-2025-191708 kam193 2 IOCs

Jul 14, 2025
PyPI
cas-base 1.5.2, 1.5.3, 1.5.5, 1.5.6, 1.5.7, 1.5.8, 1.5.9, 1.6.0, 1.6.1, 1.6.2, 1.6.3, 1.…
MAL-2025-193014 kam193 4 IOCs

Jul 14, 2025
PyPI
gateway-framework 0.1, 0.2, 0.3
MAL-2025-6508 reversing-labs, kam193

Jul 14, 2025
PyPI
dbnodeindicator 0.1.0, 0.1.1
MAL-2025-6492 reversing-labs, kam193 2 IOCs

Jul 14, 2025
PyPI
httppack 0.1, 0.2
MAL-2025-6522 reversing-labs, kam193

Jul 14, 2025