Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

12,022 reports · Feed

  • PyPI
    meowsapi 0.2, 0.3
    MAL-2025-4224 reversing-labs, kam193 1 IOC
  • PyPI
    pydoxing 8.8.8, 8.8.9, 8.9.0, 8.9.1, 8.9.2
    MAL-2025-4230 reversing-labs, kam193
  • PyPI
    telepycore 2.0.4, 2.0.2, 2.0.5, 2.0.7, 2.0.6, 1.0.1, 2.0.1, 1.5.2, 1.5.3
    MAL-2025-191889 kam193 4 IOCs
  • PyPI
    helmet-fastapi 1.2, 1.3, 1.3.1, 1.3.2, 1.3.3
    MAL-2025-191752 kam193
  • PyPI
    wallettron 0.2.0
    MAL-2025-6619 reversing-labs, kam193 4 IOCs
  • PyPI
    tronlid 0.0.1
    MAL-2025-6609 reversing-labs, kam193 4 IOCs
  • PyPI
    tronlibapi 0.0.1
    MAL-2025-6608 reversing-labs, kam193 4 IOCs
  • PyPI
    tronjoi 0.0.1
    MAL-2025-6607 reversing-labs, kam193 4 IOCs
  • PyPI
    tronapipy 0.0.1
    MAL-2025-6606 reversing-labs, kam193 4 IOCs
  • PyPI
    tronapinet 0.0.1
    MAL-2025-6605 reversing-labs, kam193 4 IOCs
  • PyPI
    wallettronpy 0.1.0
    MAL-2025-5141 reversing-labs, kam193 4 IOCs
  • PyPI
    trongridlib 0.0.1
    MAL-2025-5140 reversing-labs, kam193 4 IOCs
  • PyPI
    trxtwo 0.0.1
    MAL-2025-4249 reversing-labs, kam193 4 IOCs
  • PyPI
    trxone 0.0.1
    MAL-2025-4248 reversing-labs, kam193 4 IOCs
  • PyPI
    tronlix 0.0.1
    MAL-2025-4247 reversing-labs, kam193 4 IOCs
  • PyPI
    tronlibpy 0.0.1
    MAL-2025-4246 reversing-labs, kam193 4 IOCs
  • PyPI
    tronlib 0.0.1
    MAL-2025-4245 reversing-labs, kam193 4 IOCs
  • PyPI
    tronix 0.0.1
    MAL-2025-4244 reversing-labs, kam193 4 IOCs
  • PyPI
    web3evm 0.1.0, 0.1.1, 0.1.2, 0.1.3
    MAL-2025-5142 reversing-labs, kam193 2 IOCs
  • PyPI
    websign 0.1.0
    MAL-2025-4273 reversing-labs, kam193 2 IOCs
  • PyPI
    web3yrpcs 1.1.2
    MAL-2025-4272 reversing-labs, kam193 2 IOCs
  • PyPI
    web3wallet 0.1.1
    MAL-2025-4271 reversing-labs, kam193 2 IOCs
  • PyPI
    web3automation 1.1.2, 1.1.5, 1.1.7, 1.1.4
    MAL-2025-4270 reversing-labs, kam193 2 IOCs
  • PyPI
    web3author 1.0.0
    MAL-2025-4269 reversing-labs, kam193 2 IOCs
  • PyPI
    walletweb3 0.1.1
    MAL-2025-4260 reversing-labs, kam193 2 IOCs
  • PyPI
    walletrpcs 0.1.1, 0.1.2
    MAL-2025-4259 reversing-labs, kam193 2 IOCs
  • PyPI
    ora3 0.1.1
    MAL-2025-4227 reversing-labs, kam193 2 IOCs
  • PyPI
    alchemyrpcs 1.1.7, 1.1.8
    MAL-2025-4205 reversing-labs, kam193 2 IOCs
  • PyPI
    pretty-cli-logger 1.0.0, 1.0.1, 1.0.3, 1.0.4, 1.0.5, 1.0.6, 1.0.7, 1.0.8, 1.0.9, 1.1.0, 1.1.1, 1.…
    MAL-2025-191816 kam193 3 IOCs
  • PyPI
    qtpv 0.1.0, 0.2.0, 0.3.0, 0.4.0
    MAL-2025-191849 kam193
  • PyPI
    pytzv 0.2.0, 0.1.0, 0.4.0, 0.3.0
    MAL-2025-191847 kam193
  • PyPI
    neov 0.1.0, 0.2.0
    MAL-2025-191801 kam193
  • PyPI
    tensorflowlitex 0.1.7
    MAL-2025-191890 kam193 2 IOCs
  • PyPI
    bytedmemfdd345 0.2
    MAL-2025-4208 reversing-labs, kam193
  • PyPI
    byted-torch-monitor 0.0.1, 0.2
    MAL-2025-4207 reversing-labs, kam193
  • PyPI
    ark-vmp-reverse 0.0.1
    MAL-2025-4206 reversing-labs, kam193
  • PyPI
    web3rpcs 0.1.0, 1.1.0
    MAL-2025-3482 reversing-labs
  • PyPI
    web3rpc 2.1.0
    MAL-2025-3481 reversing-labs
  • PyPI
    web3connectpy 0.1.0
    MAL-2025-3480 reversing-labs
  • PyPI
    web3-validator 1.0.0, 1.1.0, 1.2.0
    MAL-2025-3479 reversing-labs