Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,162 npm 223,990 PyPI 12,022 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,022 reports · Feed

  • PyPI
    apilogicserver 14.5.0
    MAL-2025-3929 ossf-package-analysis
  • PyPI
    freelabs 1.1.5
    MAL-2025-191734 kam193
  • PyPI
    solana-trade 1.0.0
    MAL-2025-5139 reversing-labs, kam193 6 IOCs
  • PyPI
    solana-live 0.1.0
    MAL-2025-5138 reversing-labs, kam193 6 IOCs
  • PyPI
    solana-coin 0.0.1
    MAL-2025-5136 reversing-labs, kam193 6 IOCs
  • PyPI
    sol-prices 1.0.0
    MAL-2025-5133 reversing-labs, kam193 6 IOCs
  • PyPI
    dexscreener-data 0.1.0
    MAL-2025-5111 reversing-labs, kam193 6 IOCs
  • PyPI
    dexscreener-charts 1.0.0
    MAL-2025-5110 reversing-labs, kam193 6 IOCs
  • PyPI
    coloraiz 1.0.1, 1.0.2, 1.0.3
    MAL-2025-5102 reversing-labs, kam193 2 IOCs
  • PyPI
    rich-figlet 0.0.1, 0.0.2
    MAL-2025-5130 reversing-labs, kam193 4 IOCs
  • PyPI
    pyfiglets 0.0.1
    MAL-2025-5124 reversing-labs, kam193 4 IOCs
  • PyPI
    myownpyfiglet 0.0.1
    MAL-2025-5119 reversing-labs, kam193 4 IOCs
  • PyPI
    requestpackat 1.0.1, 1.0.2
    MAL-2025-5127 reversing-labs, kam193 3 IOCs
  • PyPI
    netspear 1.0.7
    MAL-2025-5121 reversing-labs, kam193 3 IOCs
  • PyPI
    netpackat 1.0.4
    MAL-2025-5120 reversing-labs, kam193 3 IOCs
  • PyPI
    discorddox 0.1.8, 1.8.8
    MAL-2025-5112 reversing-labs, kam193
  • PyPI
    telegramdoxing 0.1.0
    MAL-2025-191888 kam193
  • PyPI
    free-internet-dns 0.1.0
    MAL-2025-4219 reversing-labs, kam193 1 IOC
  • PyPI
    solana-test-suite 1.0.0
    MAL-2025-4240 reversing-labs, kam193 1 IOC
  • PyPI
    glean-indexing-api-client 1.0.0
    MAL-2025-4220 reversing-labs, kam193 1 IOC
  • PyPI
    python3-shodan 0.0.1
    MAL-2025-191845 kam193 1 IOC
  • PyPI
    badgerdoc-storage 0.0.1
    MAL-2025-3740 ossf-package-analysis, reversing-labs, kam193 1 IOC
  • PyPI
    dial-xl 0.0.1
    MAL-2025-3741 ossf-package-analysis, reversing-labs, kam193 1 IOC
  • PyPI
    program-admin 0.0.1, 1.0.1
    MAL-2025-3744 ossf-package-analysis, reversing-labs, kam193 1 IOC
  • PyPI
    iconnect 0.0.1
    MAL-2025-3743 ossf-package-analysis, reversing-labs, kam193 1 IOC
  • PyPI
    document-inference 0.0.2, 0.0.0, 0.0.1
    MAL-2025-3742 ossf-package-analysis, reversing-labs, kam193 1 IOC
  • PyPI
    initer 0.2.1, 0.2.2, 0.2.5, 0.2.6
    MAL-2025-6524 reversing-labs, kam193 1 IOC
  • PyPI
    pyinitialyze 0.1.0, 0.1.1, 0.1.3, 0.1.2
    MAL-2025-4232 reversing-labs, kam193 1 IOC
  • PyPI
    pyiniter 0.1.0
    MAL-2025-4231 reversing-labs, kam193 1 IOC
  • PyPI
    pyinite 0.1.4, 0.1.5, 0.1.6, 0.1.7, 0.1.8, 0.1.9
    MAL-2025-191834 kam193 1 IOC
  • PyPI
    matlab-cli 0.3, 0.1, 0.2, 0.6, 0.4, 0.7, 0.5, 0.8, 0.9, 0.9.1, 0.9.2, 1.0
    MAL-2025-191785 kam193 1 IOC
  • PyPI
    veriftest1asdlaaaa 1
    MAL-2025-4254 reversing-labs, kam193 1 IOC
  • PyPI
    veriftest1asdlaaa 1
    MAL-2025-4253 reversing-labs, kam193 1 IOC
  • PyPI
    veriftest1asdlaa 1
    MAL-2025-4252 reversing-labs, kam193 1 IOC
  • PyPI
    veriftest1asdla 1
    MAL-2025-4251 reversing-labs, kam193 1 IOC
  • PyPI
    veriftest1asdl 1
    MAL-2025-4250 reversing-labs, kam193 1 IOC
  • PyPI
    testveriftest1asdlaaaaa 1
    MAL-2025-3603 ossf-package-analysis, kam193 1 IOC
  • PyPI
    testveriftest1asdlaaaa 1
    MAL-2025-3602 ossf-package-analysis, kam193 1 IOC
  • PyPI
    timsingapi 0.3
    MAL-2025-4242 reversing-labs, kam193 1 IOC
  • PyPI
    rblxfando 0.1
    MAL-2025-4237 reversing-labs, kam193 1 IOC