Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,162 npm 223,990 PyPI 12,022 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,022 reports · Feed

PyPI
axonify 6.2, 7.6, 1.0, 8.0, 8.5, 9.0, 10.0
MAL-2025-191688 kam193 6 IOCs

Mar 18, 2025
PyPI
xcepthttp 0.0.2
MAL-2025-3483 reversing-labs, kam193 5 IOCs

Mar 17, 2025
PyPI
httpx-client 0.0.1
MAL-2025-3448 reversing-labs, kam193 5 IOCs

Mar 17, 2025
PyPI
asynchttpx 0.0.2
MAL-2025-3429 reversing-labs, kam193 5 IOCs

Mar 17, 2025
PyPI
tonetext 0.1.1, 0.2.1
MAL-2025-191906 kam193 1 IOC

Mar 12, 2025
PyPI
ccxt-mexc-futures 0.1.4, 0.1.5, 0.1.6, 0.1.7, 0.1.8
MAL-2025-3439 reversing-labs, kam193 5 IOCs

Mar 10, 2025
PyPI
wiki-requests 0.0.1, 0.0.2, 0.0.3
MAL-2025-3019 reversing-labs, kam193 1 IOC

Mar 9, 2025
PyPI
voipms-service 0.1
MAL-2025-191922 kam193

Mar 9, 2025
PyPI
tlsclient3 1.0.1, 1.0.2
MAL-2025-3008 reversing-labs, kam193 6 IOCs

Mar 8, 2025
PyPI
heroku-tl 3.2.0, 3.2.1, 3.2.2, 3.2.5, 2.1.0, 2.1.1, 2.2.2, 2.5.0, 2.5.1, 2.6.0, 2.8.0, 2.…
MAL-2025-2967 reversing-labs, kam193 3 IOCs

Mar 8, 2025
PyPI
colorizetext 0.1.1, 0.1.2, 0.1.3, 0.1.4, 0.1.0
MAL-2025-2949 reversing-labs, kam193 1 IOC

Mar 5, 2025
PyPI
enquiry-exam 999.999.999
MAL-2025-2957 reversing-labs, kam193

Mar 5, 2025
PyPI
certifications 999.999.999
MAL-2025-2152 ossf-package-analysis, kam193

Mar 5, 2025
PyPI
pythonhttp 0.1, 1.0.4
MAL-2025-2993 reversing-labs, kam193

Mar 4, 2025
PyPI
xuiniadb 1, 1.1, 1.2, 1.3, 1.4, 1.5, 1.6, 1.7, 1.8, 1.0
MAL-2025-2013 reversing-labs

Mar 3, 2025
PyPI
usvr-agent 0.1.0, 0.2.0, 0.3.0
MAL-2025-2008 reversing-labs, kam193

Mar 3, 2025
PyPI
useragents 0.1, 0.1.1
MAL-2025-2007 reversing-labs

Mar 3, 2025
PyPI
usar-agent 0.1.0
MAL-2025-2006 reversing-labs

Mar 3, 2025
PyPI
tronyx 0.0.1, 0.0.2, 0.0.3, 0.0.4, 0.0.5, 0.0.6, 0.0.7, 0.0.8, 0.0.9, 0.0.10, 0.0.11, …
MAL-2025-2005 reversing-labs

Mar 3, 2025
PyPI
tronx 0.1
MAL-2025-2004 reversing-labs

Mar 3, 2025
PyPI
tronwebpy 0.0.1
MAL-2025-2003 reversing-labs

Mar 3, 2025
PyPI
tronpyweb 0.0.1
MAL-2025-2002 reversing-labs

Mar 3, 2025
PyPI
tronpynet 0.0.1
MAL-2025-2001 reversing-labs

Mar 3, 2025
PyPI
tronnetpy 0.0.1
MAL-2025-2000 reversing-labs

Mar 3, 2025
PyPI
tronlinkpy 0.0.1
MAL-2025-1999 reversing-labs

Mar 3, 2025
PyPI
trongridpy 0.0.1
MAL-2025-1998 reversing-labs

Mar 3, 2025
PyPI
ransomware 1.0.0
MAL-2025-1988 reversing-labs

Mar 3, 2025
PyPI
randomuseragent 0.1.1
MAL-2025-1987 reversing-labs

Mar 3, 2025
PyPI
maliciouspkg 0.0.1
MAL-2025-1979 reversing-labs

Mar 3, 2025
PyPI
fakeuseragent 0.1.1
MAL-2025-1974 reversing-labs

Mar 3, 2025
PyPI
envvenuma 0.2.0, 0.3.0, 0.4.0
MAL-2025-1972 reversing-labs

Mar 3, 2025
PyPI
aurm-python-sdk 0.1.0, 0.1.10, 0.1.11, 1.0.1, 1.0.2, 1.0.3, 1.0.10, 1.0.11, 1.1.0, 1.1.10, 1.1.…
MAL-2025-1967 reversing-labs

Mar 3, 2025
PyPI
aurm-desktop-client 0.38.10, 0.38.11, 0.39.9, 0.39.10
MAL-2025-1966 reversing-labs

Mar 3, 2025
PyPI
mirage-rce 0.0.1
MAL-2025-2975 reversing-labs, kam193

Mar 2, 2025
PyPI
marinff-test 0.2, 0.3, 0.4, 0.5, 0.6, 0.7, 0.8, 0.1
MAL-2025-2973 reversing-labs, kam193

Mar 2, 2025
PyPI
ctf-aio-tool 0.1
MAL-2025-2952 reversing-labs, kam193

Mar 2, 2025
PyPI
piedefender 0.0.1
MAL-2025-3454 reversing-labs, kam193 1 IOC

Mar 1, 2025
PyPI
pydefender 0.0.1
MAL-2025-191833 kam193 1 IOC

Mar 1, 2025
PyPI
kgmicolors 0.1.0, 0.1.1
MAL-2025-2969 reversing-labs, kam193 3 IOCs

Feb 25, 2025
PyPI
serverkeeper-verifier 1.0.1
MAL-2025-6583 reversing-labs, kam193 4 IOCs

Feb 25, 2025