Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,162 npm 223,990 PyPI 12,022 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,022 reports · Feed

PyPI
package-346234294 1.0.1, 1.0.2, 1.0.3
MAL-2025-191807 kam193, reversing-labs

Jul 13, 2025
PyPI
crpt1 1.0.0, 1.0.2, 1.7.0, 1.8.0, 1.9.0
MAL-2025-6486 reversing-labs, kam193 2 IOCs

Jul 13, 2025
PyPI
crpt 1.0.0
MAL-2025-191707 kam193 2 IOCs

Jul 12, 2025
PyPI
test-package-avinav 0.0.1
MAL-2025-5837 ossf-package-analysis, kam193

Jul 12, 2025
PyPI
gramapi 1.0.0, 1.0.2, 1.0.3
MAL-2025-6513 reversing-labs, kam193

Jul 11, 2025
PyPI
puregram 1.0.0
MAL-2025-6569 reversing-labs, kam193

Jul 11, 2025
PyPI
tronpyapi 0.0.1
MAL-2025-6610 reversing-labs, kam193 4 IOCs

Jul 11, 2025
PyPI
seclab-research-depconf-test 1.0, 1.1
MAL-2025-191863 kam193

Jul 11, 2025
PyPI
dbindicator 0.1.0, 0.1.1
MAL-2025-6491 reversing-labs, kam193 2 IOCs

Jul 11, 2025
PyPI
node-db-indicator 0.1.2
MAL-2025-6558 reversing-labs, kam193 2 IOCs

Jul 11, 2025
PyPI
gpu-free-ai 0.1.0, 0.2.0
MAL-2025-191743 kam193

Jul 10, 2025
PyPI
web3toolkit-base 0.1.0, 1.0.0, 1.1.0, 1.1.1
MAL-2025-6621 reversing-labs, kam193

Jul 10, 2025
PyPI
graphdict 3.4.0, 3.4.2, 3.4.6, 3.4.8, 3.4.10, 3.4.11, 3.4.12, 3.4.13, 3.4.14
MAL-2025-6515 reversing-labs, kam193 2 IOCs

Jul 9, 2025
PyPI
cryptob 1.6.0, 2.6.0, 2.6.2
MAL-2025-6488 reversing-labs, kam193

Jul 9, 2025
PyPI
cryptoo 2.8.2
MAL-2025-6489 reversing-labs, kam193

Jul 9, 2025
PyPI
tq95 0.1, 0.4, 0.5, 0.6, 0.2, 0.3
MAL-2025-6604 reversing-labs, kam193

Jul 7, 2025
PyPI
jython-file 0.999999999, 0.9999999999, 1.99999999999
MAL-2025-191771 kam193

Jul 7, 2025
PyPI
jsonreq-ase 0.0.3
MAL-2025-191768 kam193 1 IOC

Jul 7, 2025
PyPI
ase-jreq 0.0.3
MAL-2025-191684 kam193 1 IOC

Jul 7, 2025
PyPI
cloudscrapersafe 3.0.0, 3.1.0, 3.1.1
MAL-2025-6478 reversing-labs, kam193

Jul 6, 2025
PyPI
imad213tools 1.0.0, 213
MAL-2025-191764 kam193 3 IOCs

Jul 5, 2025
PyPI
pipmodule83 1.0.2
MAL-2025-6565 reversing-labs, kam193 2 IOCs

Jul 5, 2025
PyPI
pipmodule823 1.0.2
MAL-2025-6564 reversing-labs, kam193 2 IOCs

Jul 5, 2025
PyPI
callistopy 0.3.6, 0.1.0, 0.3.7, 0.3.91, 0.3.8, 0.3.9
MAL-2025-191698 kam193

Jul 5, 2025
PyPI
malimalooo 0.0.1
MAL-2025-6543 reversing-labs, kam193

Jul 4, 2025
PyPI
malimaloo 0.0.1
MAL-2025-6542 reversing-labs, kam193

Jul 4, 2025
PyPI
malimalo 0.0.1
MAL-2025-6541 reversing-labs, kam193

Jul 4, 2025
PyPI
malinssx 0.0.1
MAL-2025-5656 ossf-package-analysis, reversing-labs, kam193

Jul 4, 2025
PyPI
malicus 0.0.1
MAL-2025-5654 ossf-package-analysis, reversing-labs, kam193

Jul 4, 2025
PyPI
maliinn 0.0.1
MAL-2025-5655 ossf-package-analysis, reversing-labs, kam193

Jul 4, 2025
PyPI
solana-sdkpy 1.2.2, 1.2.3, 1.2.5, 1.2.6
MAL-2025-6588 reversing-labs, kam193 6 IOCs

Jul 4, 2025
PyPI
sinontop-utils 0.3.5
MAL-2025-6586 reversing-labs, kam193 6 IOCs

Jul 4, 2025
PyPI
simple-mali-pkg 0.1.0
MAL-2025-6585 reversing-labs, kam193 6 IOCs

Jul 4, 2025
PyPI
pypiion 0.1.1
MAL-2025-6571 reversing-labs, kam193 6 IOCs

Jul 4, 2025
PyPI
malipkghehe 0.1.0, 0.1.1, 0.1.2, 0.1.4
MAL-2025-6544 reversing-labs, kam193 6 IOCs

Jul 4, 2025
PyPI
hellotesthim 0.1.1
MAL-2025-6521 reversing-labs, kam193 6 IOCs

Jul 4, 2025
PyPI
confighum 0.3.5
MAL-2025-6482 reversing-labs, kam193 6 IOCs

Jul 4, 2025
PyPI
fonafx 0.2, 0.1, 0.3
MAL-2025-191733 kam193 6 IOCs

Jul 4, 2025
PyPI
hellodista 0.1.2, 0.1.0
MAL-2025-5653 ossf-package-analysis, reversing-labs, kam193 6 IOCs

Jul 4, 2025
PyPI
jirawrapped 0.2.0, 0.3.1, 0.1.0
MAL-2025-6529 reversing-labs, kam193 1 IOC

Jul 2, 2025