Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,162 npm 223,990 PyPI 12,022 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,022 reports · Feed

PyPI
7-0 0.0.0.1
MAL-2025-2927 reversing-labs

Mar 28, 2025
PyPI
3-0 0.0.0.1
MAL-2025-2926 reversing-labs

Mar 28, 2025
PyPI
0-8 0.0.0.1
MAL-2025-2925 reversing-labs

Mar 28, 2025
PyPI
conn-utils 1.6.10, 1.6.11
MAL-2025-191706 kam193 2 IOCs

Mar 27, 2025
PyPI
quicolor 9.7.3, 9.8.1, 10.0.0, 10.0.1, 10.0.2, 10.0.3, 10.0.4, 10.0.5, 10.0.6, 10.0.9
MAL-2025-3462 reversing-labs, kam193 1 IOC

Mar 25, 2025
PyPI
quickcolors 10.0.9
MAL-2025-3461 reversing-labs, kam193 1 IOC

Mar 25, 2025
PyPI
coloryi 10.0.9
MAL-2025-3444 reversing-labs, kam193 1 IOC

Mar 25, 2025
PyPI
pyrovider 10.0.1, 10.0.2, 10.0.4, 10.0.3, 10.0.5, 10.0.6
MAL-2025-191836 kam193

Mar 24, 2025
PyPI
team-bsb-bot 1.0.0
MAL-2025-2622 oracle-using-macaron

Mar 24, 2025
PyPI
bsb-backup 2.0
MAL-2025-2621 oracle-using-macaron, reversing-labs

Mar 24, 2025
PyPI
f2d5cfdc642c3d5 0.1
MAL-2025-3447 reversing-labs, kam193 1 IOC

Mar 24, 2025
PyPI
f2d5cfdc642c3d4 0.1
MAL-2025-3446 reversing-labs, kam193 1 IOC

Mar 24, 2025
PyPI
bbllaacckkwwoollff6ad8f762 0.1, 0.2, 0.3
MAL-2025-3435 reversing-labs, kam193 1 IOC

Mar 24, 2025
PyPI
bbllaacckkwwoollff6ad8f753 0.1
MAL-2025-3434 reversing-labs, kam193 1 IOC

Mar 24, 2025
PyPI
bbllaacckkwwoollff6ad8f752 0.1, 0.2
MAL-2025-3433 reversing-labs, kam193 1 IOC

Mar 24, 2025
PyPI
bbllaacckkwwoollff6ad8f751 0.1
MAL-2025-3432 reversing-labs, kam193 1 IOC

Mar 24, 2025
PyPI
bbllaacckkwwoollff-6ad8f762-1a91-45d7-a9c5-356bd858356a 0.1, 0.2
MAL-2025-3431 reversing-labs, kam193 1 IOC

Mar 24, 2025
PyPI
bbllaacckkwwoollff 0.1, 0.2, 0.3, 0.4
MAL-2025-3430 reversing-labs, kam193 1 IOC

Mar 24, 2025
PyPI
yolov8mini 0.1, 0.1.1, 1.1.1, 1.2.1, 1.3.1, 1.4.1, 2.0.1, 2.1.1, 2.2.1, 2.3.1
MAL-2025-3484 reversing-labs, kam193

Mar 23, 2025
PyPI
codeoptimizer 4.1.1, 4.2.1
MAL-2025-3440 reversing-labs, kam193

Mar 23, 2025
PyPI
prmduc193 0.1
MAL-2025-191818 kam193 1 IOC

Mar 21, 2025
PyPI
connector-bsb 1.0.0
MAL-2025-2602 oracle-using-macaron

Mar 19, 2025
PyPI
bsb-family-pack 1.0.0
MAL-2025-2600 oracle-using-macaron

Mar 19, 2025
PyPI
bsb-connector 1.0.0
MAL-2025-2598 oracle-using-macaron

Mar 19, 2025
PyPI
blackspammerbd-v1 1.0.1
MAL-2025-2596 oracle-using-macaron

Mar 19, 2025
PyPI
blackspammerbd-tools 1.0.0
MAL-2025-2595 oracle-using-macaron

Mar 19, 2025
PyPI
blackspammerbd-tooll 1.0.0
MAL-2025-2594 oracle-using-macaron

Mar 19, 2025
PyPI
blackspammerbd-tool 1.0.0
MAL-2025-2593 oracle-using-macaron

Mar 19, 2025
PyPI
blackspammerbd-tg 1.0.0
MAL-2025-2592 oracle-using-macaron

Mar 19, 2025
PyPI
blackspammerbd-remot1 1.0.0
MAL-2025-2591 oracle-using-macaron

Mar 19, 2025
PyPI
blackspammerbd-remot 1.0.0
MAL-2025-2590 oracle-using-macaron

Mar 19, 2025
PyPI
blackspammerbd-one 1.0.0
MAL-2025-2589 oracle-using-macaron

Mar 19, 2025
PyPI
blackspammerbd-bsb 1.0.1
MAL-2025-2588 oracle-using-macaron

Mar 19, 2025
PyPI
blackspammerbd-bot 1.0.0, 0.1
MAL-2025-2587 oracle-using-macaron

Mar 19, 2025
PyPI
blackspammerbd 1.0.0, 0.1
MAL-2025-2586 oracle-using-macaron

Mar 19, 2025
PyPI
bsb-family-pack2 1.0.0
MAL-2025-2601 oracle-using-macaron

Mar 18, 2025
PyPI
blackspammerbd1 1.0
MAL-2025-2597 oracle-using-macaron

Mar 18, 2025
PyPI
bsb-family-bot 0.1.0
MAL-2025-2599 oracle-using-macaron, reversing-labs

Mar 18, 2025
PyPI
python-socket-test 1.0.0, 1.0.1, 1.1.1, 2.0.0, 2.0.1
MAL-2025-3460 reversing-labs, kam193

Mar 18, 2025
PyPI
logax 1, 1.5, 2.4, 2.5, 2.7, 2.9, 3.1, 3.2, 3.4, 3.5, 3.6, 3.7, 3.8, 3.9, 4, 4.2, 4.3…
MAL-2025-3450 reversing-labs, kam193 6 IOCs

Mar 18, 2025