Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,162 npm 223,990 PyPI 12,022 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,022 reports · Feed

PyPI
tronperm 0.0.1
MAL-2025-3478 reversing-labs

Apr 23, 2025
PyPI
tronlinkperm 0.0.1
MAL-2025-3477 reversing-labs

Apr 23, 2025
PyPI
tronclipy 0.0.1
MAL-2025-3476 reversing-labs

Apr 23, 2025
PyPI
timekeeper-verif1er 1.0.1
MAL-2025-3474 reversing-labs

Apr 23, 2025
PyPI
sxz 1.3, 1.4, 1.7
MAL-2025-3472 reversing-labs

Apr 23, 2025
PyPI
sincpro-logger 0.1.0
MAL-2025-3470 reversing-labs

Apr 23, 2025
PyPI
pyhack 1.0.1
MAL-2025-3459 reversing-labs

Apr 23, 2025
PyPI
pycolarized 2.2.5
MAL-2025-3457 reversing-labs

Apr 23, 2025
PyPI
pyapimove 1.0.0, 1.0.1
MAL-2025-3456 reversing-labs

Apr 23, 2025
PyPI
pnuske 0.1, 0.2, 0.4, 0.5, 0.6, 0.7, 0.8, 0.9, 1, 1.1, 1.2, 1.3, 1.4, 1.5
MAL-2025-3455 reversing-labs

Apr 23, 2025
PyPI
leveup 1.0, 1.1
MAL-2025-3449 reversing-labs

Apr 23, 2025
PyPI
evm-validator 0.1.0
MAL-2025-3445 reversing-labs

Apr 23, 2025
PyPI
blackspammerbd-vx1 1.0.0
MAL-2025-3438 reversing-labs

Apr 23, 2025
PyPI
s3transfer-sl 0.12.4, 0.12.0, 0.12.1, 0.12.2, 0.12.3, 0.12.5
MAL-2025-191861 kam193

Apr 23, 2025
PyPI
aiolitesql 0.21.0
MAL-2025-4204 reversing-labs, kam193

Apr 22, 2025
PyPI
aioasyncsqlite 1.0.0
MAL-2025-4203 reversing-labs, kam193

Apr 22, 2025
PyPI
reqinstall 1.0.1, 1.1.0
MAL-2025-4238 reversing-labs, kam193 2 IOCs

Apr 20, 2025
PyPI
zsender 1.2.7
MAL-2025-191945 kam193 2 IOCs

Apr 20, 2025
PyPI
zscaner 1.2.0, 1.3.0
MAL-2025-191944 kam193 2 IOCs

Apr 20, 2025
PyPI
zmaker 1.0.3, 1.0.4
MAL-2025-191943 kam193 2 IOCs

Apr 20, 2025
PyPI
pyapiepo 1.1.3, 1.1.4
MAL-2025-191831 kam193 2 IOCs

Apr 20, 2025
PyPI
colorona 0.2.6
MAL-2025-3443 reversing-labs, kam193

Apr 12, 2025
PyPI
colorina 0.1.3, 0.1.6, 0.2.0, 0.2.2, 0.2.3, 0.2.4, 0.2.5, 0.1.0, 0.1.2, 0.1.4, 0.1.5
MAL-2025-3441 reversing-labs, kam193

Apr 10, 2025
PyPI
hyper-request 1.0.0
MAL-2025-191763 kam193

Apr 5, 2025
PyPI
ultrafasttelethon 1.39.0, 1.39.0.1, 1.39.0.2, 1.39.0.3
MAL-2025-191915 kam193 2 IOCs

Apr 4, 2025
PyPI
fastgram 1.0.0
MAL-2025-191724 kam193 2 IOCs

Apr 4, 2025
PyPI
fastertelethon 1.0.5, 1.0.0
MAL-2025-191723 kam193 2 IOCs

Apr 4, 2025
PyPI
colorinsa 0.0.1
MAL-2025-3442 reversing-labs, kam193

Apr 3, 2025
PyPI
flask-auth-system 0.0.1, 0.0.2
MAL-2025-191731 kam193 1 IOC

Apr 2, 2025
PyPI
flask-auth-sys 1.0.5
MAL-2025-191730 kam193 1 IOC

Apr 2, 2025
PyPI
sccket 3.8.5.1
MAL-2025-3469 reversing-labs, kam193

Mar 31, 2025
PyPI
runwifi 3.8.5.1
MAL-2025-3468 reversing-labs, kam193

Mar 31, 2025
PyPI
runningwifi 1
MAL-2025-3467 reversing-labs, kam193

Mar 31, 2025
PyPI
randomwifi 3.8.5.1
MAL-2025-3463 reversing-labs, kam193

Mar 31, 2025
PyPI
bitcoinlibdbfix 0.4.8, 0.4.9, 0.4.10, 0.4.11, 0.4.12, 0.4.13, 0.4.14
MAL-2025-3437 reversing-labs, kam193 2 IOCs

Mar 30, 2025
PyPI
bitcoinlib-dev 0.4.16, 0.4.17, 0.4.18, 0.4.19, 0.4.20, 0.4.21
MAL-2025-3436 reversing-labs, kam193 2 IOCs

Mar 30, 2025
PyPI
textgradient 0.1, 0.2, 0.3
MAL-2025-3473 reversing-labs, kam193 4 IOCs

Mar 28, 2025
PyPI
ytest-cov 0.0.0.1
MAL-2025-3020 reversing-labs

Mar 28, 2025
PyPI
utilmy 0.0.0.1
MAL-2025-3013 reversing-labs

Mar 28, 2025
PyPI
twilio-rest 0.0.0.1
MAL-2025-3012 reversing-labs

Mar 28, 2025