Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 240,458 npm 223,292 PyPI 12,017 RubyGems 4,319 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,017 reports · Feed

PyPI
voxcpmui3 0.1.0
MAL-2026-17464 kam193, amazon-inspector

Oct 3, 2026
PyPI
echogen 1.0.0
MAL-2026-17462 kam193, amazon-inspector

Oct 3, 2026
PyPI
voxcpmtts3 0.1.0, 0.1.1, 0.1.2
MAL-2026-17463 kam193, amazon-inspector

Oct 3, 2026
PyPI
voxel-tts 0.5.0, 0.5.1
MAL-2026-17461 kam193, amazon-inspector

Oct 3, 2026
PyPI
voxeval 0.4.2, 0.4.3, 0.4.4, 0.4.5
MAL-2026-17457 kam193, amazon-inspector

Oct 2, 2026
PyPI
dedh-devops-automation 0.0.1, 5.0.0, 5.6.0, 5.6.1, 5.6.999, 5.8.0, 5.8.1, 5.9.0
MAL-2026-17455 kam193, amazon-inspector 1 IOC

Oct 2, 2026
PyPI
shortneer 0.1.0
MAL-2026-17422 kam193, amazon-inspector

Oct 1, 2026
PyPI
spo365-graph 1.0.0, 1.1.0, 1.1.1, 1.1.2
MAL-2026-17421 kam193, amazon-inspector 1 IOC

Oct 1, 2026
PyPI
friendly-tools 0.1, 0.2
MAL-2026-17419 kam193, amazon-inspector 1 IOC

Oct 1, 2026
PyPI
friendly-greeting-tools 0.1.0, 0.1.1, 0.2, 0.3, 0.3.1, 0.3.2, 0.3.3, 0.3.4, 0.3.5, 0.3.6, 0.3.7
MAL-2026-17416 kam193, amazon-inspector 1 IOC

Sep 30, 2026
PyPI
beautifytext 1.0.3, 1.0.4, 1.0.7
MAL-2026-17417 kam193, amazon-inspector 2 IOCs

Sep 30, 2026
PyPI
cleanup-string 1.0.0
MAL-2026-17325 amazon-inspector

Sep 30, 2026
PyPI
bfox-build-utils 1.0.997
MAL-2026-17319 amazon-inspector

Sep 30, 2026
PyPI
queeuees 0.0.1
MAL-2026-17286 kam193, amazon-inspector

Sep 29, 2026
PyPI
aseitylab 0.1.0, 0.1.1
MAL-2026-17240 kam193, amazon-inspector 4 IOCs

Sep 28, 2026
PyPI
azure-langchain-example 0.1.0
MAL-2026-17213 kam193, amazon-inspector

Sep 28, 2026
PyPI
scrapetools2 1.2.1, 1.2.0, 0.2.0, 0.2.1
MAL-2026-17199 amazon-inspector

Sep 27, 2026
PyPI
aseity 0.1.0
MAL-2026-17200 kam193, amazon-inspector 4 IOCs

Sep 27, 2026
PyPI
caracas4check 1.1.1, 1.1.2
MAL-2026-17198 kam193, amazon-inspector 2 IOCs

Sep 27, 2026
PyPI
coinscan 0.1.0
MAL-2026-17197 kam193, amazon-inspector 4 IOCs

Sep 27, 2026
PyPI
claudedashbord 0.1.0, 0.1.1, 0.1.2, 0.1.3
MAL-2026-17195 kam193, amazon-inspector 4 IOCs

Sep 27, 2026
PyPI
donutpromotion 0.1.0
MAL-2026-17196 kam193, amazon-inspector 4 IOCs

Sep 27, 2026
PyPI
metrics-sdk 999.0.0, 1000.0.0, 1001.0.0
MAL-2026-17194 kam193, amazon-inspector

Sep 27, 2026
PyPI
metrio 999.0.0, 1000.0.0, 1001.0.0
MAL-2026-17193 kam193, amazon-inspector

Sep 27, 2026
PyPI
donutautosellsrc 0.3.7, 0.3.8, 0.3.9
MAL-2026-17192 kam193, amazon-inspector 3 IOCs

Sep 27, 2026
PyPI
requests-cache-utils 1.0.0
MAL-2026-17191 kam193 2 IOCs

Sep 26, 2026
PyPI
sherpy 0.1.0, 0.1.1
MAL-2026-17188 kam193, amazon-inspector

Sep 25, 2026
PyPI
tego-managed-agents-test 0.1.0
MAL-2026-17183 kam193, amazon-inspector 1 IOC

Sep 25, 2026
PyPI
reqparser 1.0.0, 1.0.1
MAL-2026-17181 kam193, amazon-inspector 2 IOCs

Sep 25, 2026
PyPI
my-private-pkg 99.1.1, 0.1.1, 99.11.2
MAL-2026-17180 amazon-inspector, kam193 2 IOCs

Sep 25, 2026
PyPI
vercel-runtime-python 0.1.0, 99.99.99, 100.99.99, 100.100.99
MAL-2026-17168 kam193, amazon-inspector

Sep 24, 2026
PyPI
prosocks 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5, 1.0.6, 1.0.7, 1.0.8, 1.0.9, 1.0.13, 1…
MAL-2026-17167 kam193, amazon-inspector 1 IOC

Sep 24, 2026
PyPI
memoryos 2.0.34
MAL-2026-16475 kam193, amazon-inspector 4 IOCs

Sep 23, 2026
PyPI
kerokwis 99
MAL-2026-16421 kam193

Sep 22, 2026
PyPI
auclean 0.4.2, 0.4.3, 0.4.4
MAL-2026-16410 kam193, amazon-inspector 1 IOC

Sep 22, 2026
PyPI
snap-queue 1.0.0
MAL-2026-16408 kam193, amazon-inspector

Sep 22, 2026
PyPI
poly-check-b 1.0.0
MAL-2026-16407 kam193

Sep 22, 2026
PyPI
crypto-trader-py 1.0.0
MAL-2026-16406 kam193, amazon-inspector

Sep 22, 2026
PyPI
cloushaar-poc-exfil-91827 0.0.1
MAL-2026-16377 kam193, amazon-inspector

Sep 22, 2026
PyPI
pullgetsage 0.1.2, 0.1.0, 0.1.1
MAL-2026-16366 amazon-inspector, kam193 2 IOCs

Sep 21, 2026