Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,162 npm 223,990 PyPI 12,022 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,022 reports · Feed

PyPI
pyfernet 0.0.1
MAL-2025-5123 reversing-labs, kam193 6 IOCs

May 27, 2025
PyPI
fernetpy 0.0.1
MAL-2025-5113 reversing-labs, kam193 6 IOCs

May 27, 2025
PyPI
fernets 0.0.1
MAL-2025-191728 kam193 6 IOCs

May 27, 2025
PyPI
tensorflows 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5, 1.1.0, 1.1.1, 1.1.2, 1.1.4, 1.1.3
MAL-2025-191891 kam193

May 26, 2025
PyPI
matplotlibe 1.0.0
MAL-2025-191786 kam193

May 26, 2025
PyPI
ypj 0.5
MAL-2025-4274 reversing-labs

May 22, 2025
PyPI
web3-validators 2.0.0, 2.1.0
MAL-2025-4268 reversing-labs

May 22, 2025
PyPI
web3-requests 1.8.54
MAL-2025-4267 reversing-labs

May 22, 2025
PyPI
web3-request-1-8-54 1.8.54
MAL-2025-4266 reversing-labs

May 22, 2025
PyPI
web3-request 1.7.53, 1.8.54
MAL-2025-4265 reversing-labs

May 22, 2025
PyPI
web3-checksums 2.0
MAL-2025-4264 reversing-labs

May 22, 2025
PyPI
web3-checksumm 1.0, 1.0.0
MAL-2025-4263 reversing-labs

May 22, 2025
PyPI
web3-checksum 1.0
MAL-2025-4262 reversing-labs

May 22, 2025
PyPI
web3-auto 1.3.0
MAL-2025-4261 reversing-labs

May 22, 2025
PyPI
wallet-rpc 0.1.1
MAL-2025-4258 reversing-labs

May 22, 2025
PyPI
verifysteream 1.8.13, 1.8.14, 1.8.15
MAL-2025-4255 reversing-labs

May 22, 2025
PyPI
tronclient 0.0.1
MAL-2025-4243 reversing-labs

May 22, 2025
PyPI
solanautil 2.1.1
MAL-2025-4241 reversing-labs

May 22, 2025
PyPI
pythonbitcoinlib 0.1.1
MAL-2025-4236 reversing-labs

May 22, 2025
PyPI
pythonbinance 0.1.1
MAL-2025-4235 reversing-labs

May 22, 2025
PyPI
python-coinbase 0.1
MAL-2025-4234 reversing-labs

May 22, 2025
PyPI
pystile 0.0.4, 0.0.5, 0.0.6, 0.0.7, 0.1.1
MAL-2025-4233 reversing-labs

May 22, 2025
PyPI
py-solanautil 2.1.3, 2.1.4, 2.1.5, 2.1.6, 2.1.7
MAL-2025-4229 reversing-labs

May 22, 2025
PyPI
puttytitle 0.1
MAL-2025-4228 reversing-labs

May 22, 2025
PyPI
keybard 0.1.0, 0.2.0
MAL-2025-4221 reversing-labs

May 22, 2025
PyPI
evillib-cli-demo 0.1
MAL-2025-4218 reversing-labs

May 22, 2025
PyPI
el1t3 0.1.1, 0.1.2, 0.1.3, 0.1.4, 0.1.5, 0.1.6, 0.1.8, 0.1.9, 0.2.0, 0.2.1
MAL-2025-4217 reversing-labs

May 22, 2025
PyPI
easyascii 2.4.1, 2.4.5, 3.2.1, 3.2.2, 3.2.3, 3.2.5, 3.2.6, 3.2.8, 3.2.9, 3.3.1, 3.3.2, 3.…
MAL-2025-4216 reversing-labs

May 22, 2025
PyPI
colorate 0.0.3, 1.0.6
MAL-2025-4212 reversing-labs

May 22, 2025
PyPI
ckr 0.1, 0.2
MAL-2025-4211 reversing-labs

May 22, 2025
PyPI
chain-validator 1.0.0
MAL-2025-4209 reversing-labs

May 22, 2025
PyPI
octopus32 0.1.0, 0.1.1
MAL-2025-5122 reversing-labs, kam193 2 IOCs

May 20, 2025
PyPI
aliyun-ai-labs-snippets-sdk 1.0.0, 2.0.0, 2.1.0
MAL-2025-5096 reversing-labs, kam193 1 IOC

May 19, 2025
PyPI
ai-labs-snippets-sdk 0.1.0, 1.1.0, 1.2.0, 2.0.0, 2.2.0, 3.0.0, 3.2.0, 3.3.0, 3.4.0, 3.5.0, 4.0.0, 4.…
MAL-2025-5094 reversing-labs, kam193 1 IOC

May 19, 2025
PyPI
readmecolorama 0.1.0
MAL-2025-5126 reversing-labs, kam193 3 IOCs

May 18, 2025
PyPI
m5tlnyakblwa 0.1.0
MAL-2025-5118 reversing-labs, kam193 3 IOCs

May 18, 2025
PyPI
coloramashowtemp 0.1.0
MAL-2025-5106 reversing-labs, kam193 3 IOCs

May 18, 2025
PyPI
coloramapkgsw 0.1.0
MAL-2025-5105 reversing-labs, kam193 3 IOCs

May 18, 2025
PyPI
coloramapkgsdow 0.1.0
MAL-2025-5104 reversing-labs, kam193 3 IOCs

May 18, 2025
PyPI
coloramapkgs 0.1.0
MAL-2025-5103 reversing-labs, kam193 3 IOCs

May 18, 2025