Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,162 npm 223,990 PyPI 12,022 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,022 reports · Feed

PyPI
rehttps 2.32.3, 2.32.4
MAL-2025-6575 reversing-labs, kam193 1 IOC

Jul 1, 2025
PyPI
walletutility 0.1.0
MAL-2025-6620 reversing-labs, kam193 2 IOCs

Jul 1, 2025
PyPI
walletsutils 0.1.0
MAL-2025-6618 reversing-labs, kam193 2 IOCs

Jul 1, 2025
PyPI
walletsdk 0.1.0
MAL-2025-6617 reversing-labs, kam193 2 IOCs

Jul 1, 2025
PyPI
wallet-utils 0.1.0
MAL-2025-6615 reversing-labs, kam193 2 IOCs

Jul 1, 2025
PyPI
utilswallet 0.1.0
MAL-2025-6613 reversing-labs, kam193 2 IOCs

Jul 1, 2025
PyPI
hancsv 1.2
MAL-2025-191748 kam193 4 IOCs

Jun 29, 2025
PyPI
typing-extensions-plus 1.0.0, 3.1.2, 3.1.3
MAL-2025-191914 kam193 2 IOCs

Jun 28, 2025
PyPI
managment 0.0.3
MAL-2025-6545 reversing-labs, kam193 3 IOCs

Jun 28, 2025
PyPI
cpan 0.0.2, 0.0.3, 0.0.1
MAL-2025-6483 reversing-labs, kam193 3 IOCs

Jun 28, 2025
PyPI
sqiul83 1.0
MAL-2025-6596 reversing-labs, kam193

Jun 26, 2025
PyPI
mainx 0.1, 0.4, 0.5, 0.6, 0.7, 0.8, 0.9, 1, 1.0
MAL-2025-6540 reversing-labs, kam193

Jun 24, 2025
PyPI
chatgpt4 0.1, 0.2, 0.3, 0.4, 0.5, 0.6
MAL-2025-6477 reversing-labs, kam193

Jun 23, 2025
PyPI
hashidf 0.1.0, 0.1.1, 0.1.2
MAL-2025-6520 reversing-labs, kam193

Jun 22, 2025
PyPI
spokeo 0.1.0, 0.1.1
MAL-2025-6594 reversing-labs, kam193 2 IOCs

Jun 22, 2025
PyPI
pythondm32 1.1.0
MAL-2025-191846 kam193

Jun 21, 2025
PyPI
solana-data 0.0.1
MAL-2025-5137 reversing-labs

Jun 18, 2025
PyPI
solana-charts 0.0.1, 0.0.2
MAL-2025-5135 reversing-labs

Jun 18, 2025
PyPI
solana-chart 0.0.1, 0.0.2, 0.0.3
MAL-2025-5134 reversing-labs

Jun 18, 2025
PyPI
requestsdev 1.3.6
MAL-2025-5129 reversing-labs

Jun 18, 2025
PyPI
requestpacket 1.0.0
MAL-2025-5128 reversing-labs

Jun 18, 2025
PyPI
dbgpkg 1.3.6, 1.3.7, 1.3.8
MAL-2025-5109 reversing-labs

Jun 18, 2025
PyPI
colorizator 1.2.3, 2.1.2
MAL-2025-5107 reversing-labs

Jun 18, 2025
PyPI
blackspammerbd-workout 1.0.0
MAL-2025-5098 reversing-labs

Jun 18, 2025
PyPI
aliyun-ai-labs-sdk 1.0.0
MAL-2025-5095 reversing-labs

Jun 18, 2025
PyPI
bulktweetplus 0.1.0
MAL-2025-6471 reversing-labs, kam193 1 IOC

Jun 18, 2025
PyPI
bulktweetbyref 0.1.0
MAL-2025-6470 reversing-labs, kam193 1 IOC

Jun 18, 2025
PyPI
worldhello 1.0.0
MAL-2025-5174 ossf-package-analysis

Jun 17, 2025
PyPI
csvvv 1.0, 1.1, 1.2
MAL-2025-6490 reversing-labs, kam193 1 IOC

Jun 17, 2025
PyPI
syscachelib 0.1.0
MAL-2025-6598 reversing-labs, kam193 1 IOC

Jun 17, 2025
PyPI
browser-history-analysis 1.0.1
MAL-2025-6469 reversing-labs, kam193 2 IOCs

Jun 15, 2025
PyPI
browser-history-analytics 0.1.0, 0.1.1, 0.1.2, 0.1.3, 0.1.4, 0.1.5
MAL-2025-191695 kam193 2 IOCs

Jun 15, 2025
PyPI
zamino 1.0.0, 1.1.0
MAL-2025-191942 kam193

Jun 14, 2025
PyPI
sorex 1.1.9, 1.1.0, 1.0.0, 0.8.0, 0.6.0, 0.7.0, 0.5.0, 0.4.0, 0.3.0
MAL-2025-191873 kam193

Jun 14, 2025
PyPI
justanything 0.1.3, 0.1.0, 0.1.1, 0.1.2
MAL-2025-6531 reversing-labs, kam193 4 IOCs

Jun 13, 2025
PyPI
doverius 0.1
MAL-2025-6496 reversing-labs, kam193 4 IOCs

Jun 13, 2025
PyPI
win32str 0.0.1, 0.0.3
MAL-2025-191935 kam193 1 IOC

Jun 10, 2025
PyPI
win32evtlogutil 0.0.1
MAL-2025-191934 kam193 1 IOC

Jun 10, 2025
PyPI
win32evtlog 0.0.2, 0.0.1
MAL-2025-191933 kam193 1 IOC

Jun 10, 2025
PyPI
package-resources 0.0.1
MAL-2025-191808 kam193 1 IOC

Jun 10, 2025