Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 240,458 npm 223,292 PyPI 12,017 RubyGems 4,319 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,017 reports · Feed

PyPI
glassbeakasr 0.1.0
MAL-2026-17914 kam193, amazon-inspector

Oct 17, 2026
PyPI
emberlytts 0.1.0
MAL-2026-17913 kam193, amazon-inspector

Oct 17, 2026
PyPI
quasitonnts 0.1.0
MAL-2026-17917 kam193, amazon-inspector

Oct 17, 2026
PyPI
ukraine69 1.2.0, 1.2.1, 1.2.2, 1.2.3, 1.2.5, 1.2.6, 1.2.7, 1.2.8
MAL-2026-17919 kam193, amazon-inspector

Oct 17, 2026
PyPI
pyyi 2.4.1, 2.4.2, 2.4, 2.5.5, 2.5.2, 2.5.0, 2.5.1, 2.5.4, 2.5.3
MAL-2026-17866 amazon-inspector 5 IOCs

Oct 16, 2026
PyPI
marocolor 1.0.0
MAL-2026-17900 kam193, amazon-inspector

Oct 16, 2026
PyPI
fromthehotel-poems 0.1.0
MAL-2026-17897 kam193, amazon-inspector 4 IOCs

Oct 16, 2026
PyPI
proxyrobika 0.1.0
MAL-2026-17889 kam193, amazon-inspector

Oct 15, 2026
PyPI
proxy-rubikis 0.1.0
MAL-2026-17887 kam193

Oct 15, 2026
PyPI
py-wormgpt 1.0.0
MAL-2026-17886 kam193 4 IOCs

Oct 15, 2026
PyPI
proxyrubika 0.1.0
MAL-2026-17885 kam193

Oct 15, 2026
PyPI
getpubip 0.1.0, 0.1.1, 0.1.2
MAL-2026-17884 kam193, amazon-inspector 2 IOCs

Oct 15, 2026
PyPI
py-worm 0.1.0, 2.0.0, 2.0.1
MAL-2026-17883 kam193, amazon-inspector 4 IOCs

Oct 15, 2026
PyPI
py-sock2 0.1.0
MAL-2026-17881 kam193 4 IOCs

Oct 15, 2026
PyPI
saeka 1.0.0, 1.2.0, 1.2.1, 1.2.2, 1.2.3, 1.3.0, 1.4.0, 1.5.0, 1.6.0, 1.7.0, 1.8.0, 1.…
MAL-2026-17877 kam193, amazon-inspector 2 IOCs

Oct 14, 2026
PyPI
crelic-bqwheel-52f66a3f1d 0.0.1
MAL-2026-17863 kam193

Oct 13, 2026
PyPI
fontcase 0.1.0, 0.1.1, 0.1.2
MAL-2026-17862 kam193 3 IOCs

Oct 13, 2026
PyPI
sysdiagd 1.2.1, 1.2.2, 1.2.3
MAL-2026-17861 kam193, amazon-inspector

Oct 13, 2026
PyPI
npp-ml 0.1.7, 0.1.8, 0.1.9, 0.1.10
MAL-2026-17847 kam193, amazon-inspector

Oct 12, 2026
PyPI
minecraftaccfinder 0.1.0, 0.1.1, 0.1.2, 0.3.0, 0.3.1, 0.4.0, 2.0.0, 3.0.0
MAL-2026-17809 kam193, amazon-inspector 2 IOCs

Oct 12, 2026
PyPI
agent-vx 0.1.0
MAL-2026-17755 kam193, amazon-inspector 4 IOCs

Oct 10, 2026
PyPI
pafer 0.9.7, 0.9.8
MAL-2026-17756 kam193 2 IOCs

Oct 10, 2026
PyPI
webreader 2.3.8
MAL-2026-17757 kam193 2 IOCs

Oct 10, 2026
PyPI
media-manager5 0.1.0
MAL-2026-17753 kam193, amazon-inspector 4 IOCs

Oct 10, 2026
PyPI
agentaix 0.1.0, 0.2.0
MAL-2026-17752 kam193, amazon-inspector 4 IOCs

Oct 10, 2026
PyPI
py2ops 2.2
MAL-2026-17807 5 IOCs

Oct 9, 2026
PyPI
ig-gox 1.0.0
MAL-2026-17712 kam193, amazon-inspector 2 IOCs

Oct 9, 2026
PyPI
kafka-helmsman 99.0.1, 99.0.2, 99.0.3, 99.0.4, 99.0.5, 99.0.6
MAL-2026-17702 ossf-package-analysis, amazon-inspector, kam193

Oct 8, 2026
PyPI
kafka-roller 99.0.0, 99.0.1, 99.0.2, 99.0.3, 99.0.4, 99.0.5, 99.0.6
MAL-2026-17703 ossf-package-analysis, amazon-inspector, kam193

Oct 8, 2026
PyPI
lore-cs 1.0.0
MAL-2026-17639 kam193, amazon-inspector

Oct 6, 2026
PyPI
erc7730-hackathon 99.0.0
MAL-2026-17628 kam193

Oct 5, 2026
PyPI
anthropic-sdk 0.1.0
MAL-2026-17472 kam193, amazon-inspector 4 IOCs

Oct 4, 2026
PyPI
zencleaner 1.0.0, 1.0.3, 1.0.3.1
MAL-2026-17629 amazon-inspector 1 IOC

Oct 3, 2026
PyPI
caoxiltts 0.1.0, 0.1.1
MAL-2026-17471 kam193, amazon-inspector

Oct 3, 2026
PyPI
infrabench 0.1.0, 0.1.1, 0.2.0
MAL-2026-17469 kam193, amazon-inspector

Oct 3, 2026
PyPI
voxcpmruntime 0.1.0
MAL-2026-17470 kam193, amazon-inspector

Oct 3, 2026
PyPI
voxcpmintel 0.1.0
MAL-2026-17468 kam193

Oct 3, 2026
PyPI
voxcpmeval 0.1.0
MAL-2026-17465 kam193

Oct 3, 2026
PyPI
voxcpmkit 0.1.0
MAL-2026-17466 kam193

Oct 3, 2026
PyPI
voxcpmui4 0.2.0
MAL-2026-17467 kam193

Oct 3, 2026