Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,162 npm 223,990 PyPI 12,022 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,022 reports · Feed

  • PyPI
    torahbiblecodes 0.0.0.1, 0.2
    MAL-2025-3009 reversing-labs
  • PyPI
    tempeh 0.0.0.1, 0.1.11a1, 0.1.11a3, 0.1.11a2
    MAL-2025-3007 reversing-labs
  • PyPI
    sphinxcontrib-napolean 0.0.0.1
    MAL-2025-3003 reversing-labs
  • PyPI
    solscan 1.0.1, 1.2.2, 0.1
    MAL-2025-3001 reversing-labs
  • PyPI
    slide-tc 0.0.0.1
    MAL-2025-2998 reversing-labs
  • PyPI
    ska-low-cbf-fpga 0.0.0.1
    MAL-2025-2997 reversing-labs
  • PyPI
    shleeh 0.0.0.1, 0.0.1.dev1
    MAL-2025-2996 reversing-labs
  • PyPI
    requests-wiki 0.0.1
    MAL-2025-2995 reversing-labs
  • PyPI
    random-00013 0.0.0.1
    MAL-2025-2994 reversing-labs
  • PyPI
    pyscf-fciqmc 0.0.0.1
    MAL-2025-2991 reversing-labs
  • PyPI
    pyroforktgcrypto-pyrofork 0.0.0.1
    MAL-2025-2990 reversing-labs
  • PyPI
    pydantic-kit 1.7
    MAL-2025-2989 reversing-labs
  • PyPI
    pychaosvm 0.0.0.1, 0.0.0.2
    MAL-2025-2988 reversing-labs
  • PyPI
    piauthorizer 0.0.0.1
    MAL-2025-2987 reversing-labs
  • PyPI
    pgmysql 0.0.0.1
    MAL-2025-2986 reversing-labs
  • PyPI
    pandaspytest 0.0.0.1
    MAL-2025-2985 reversing-labs
  • PyPI
    opera2d 0.0.0.1
    MAL-2025-2982 reversing-labs
  • PyPI
    omnigodz-random 0.0.0.1
    MAL-2025-2980 reversing-labs
  • PyPI
    multiopython 0.0.0.1
    MAL-2025-2978 reversing-labs
  • PyPI
    msgspec-python313-pre 0.0.0.1
    MAL-2025-2977 reversing-labs
  • PyPI
    license-txt 0.0.0.1
    MAL-2025-2972 reversing-labs
  • PyPI
    libmelee 0.0.0.1
    MAL-2025-2971 reversing-labs
  • PyPI
    lalpulsar 0.0.0.1
    MAL-2025-2970 reversing-labs
  • PyPI
    ignore-ssl 0.0.1
    MAL-2025-2968 reversing-labs
  • PyPI
    gmpykit 0.0.0.1, 0.0.11, 0.0.8
    MAL-2025-2966 reversing-labs
  • PyPI
    flaskignoressl 0.0.2
    MAL-2025-2965 reversing-labs
  • PyPI
    fenics-dolfinx 0.0.0.1
    MAL-2025-2963 reversing-labs
  • PyPI
    execjs 0.0.0.1
    MAL-2025-2962 reversing-labs
  • PyPI
    eth-defi 0.28.0, 0.28.1
    MAL-2025-2958 reversing-labs
  • PyPI
    django-storage 0.0.0.1
    MAL-2025-2956 reversing-labs
  • PyPI
    datasetsgraphviz 0.0.0.1
    MAL-2025-2954 reversing-labs
  • PyPI
    daft-dashboard 0.0.0.1
    MAL-2025-2953 reversing-labs
  • PyPI
    cryptographymethods 0.0.0.1
    MAL-2025-2951 reversing-labs
  • PyPI
    chbencode 1.0.0
    MAL-2025-2945 reversing-labs
  • PyPI
    cdms2 0.0.0.1
    MAL-2025-2944 reversing-labs
  • PyPI
    alibabacloud-gateway-fc-util-py2 0.0.0.1
    MAL-2025-2934 reversing-labs
  • PyPI
    akangatu 0.0.0.1, 0.3, 0.20.12a0
    MAL-2025-2933 reversing-labs
  • PyPI
    aiphttp 0.0.0.1
    MAL-2025-2932 reversing-labs
  • PyPI
    agents-kit 0.0.0.1
    MAL-2025-2930 reversing-labs
  • PyPI
    acapy-agent-didx 0.0.0.1
    MAL-2025-2928 reversing-labs