Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,162 npm 223,990 PyPI 12,022 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,022 reports · Feed

PyPI
timekeeper-verifier 1.0.1
MAL-2025-3475 reversing-labs, kam193 4 IOCs

Feb 25, 2025
PyPI
tcloud-python-test 1.0.0
MAL-2025-3006 reversing-labs, kam193 4 IOCs

Feb 25, 2025
PyPI
credential-python-sdk 0.0.3
MAL-2025-2950 reversing-labs, kam193 4 IOCs

Feb 25, 2025
PyPI
acloud-client 1.0.0, 1.0.1
MAL-2025-2929 reversing-labs, kam193 4 IOCs

Feb 25, 2025
PyPI
time-service-checker 0.0.1
MAL-2025-191905 kam193 4 IOCs

Feb 25, 2025
PyPI
time-server-test 0.0.1
MAL-2025-191904 kam193 4 IOCs

Feb 25, 2025
PyPI
time-server-analyzer 0.0.1
MAL-2025-191903 kam193 4 IOCs

Feb 25, 2025
PyPI
time-server-analysis 0.0.1
MAL-2025-191902 kam193 4 IOCs

Feb 25, 2025
PyPI
time-check-server-get 0.0.1
MAL-2025-191901 kam193 4 IOCs

Feb 25, 2025
PyPI
time-check-server 0.0.1
MAL-2025-191900 kam193 4 IOCs

Feb 25, 2025
PyPI
tcloud-python-sdks 1.0.0
MAL-2025-191887 kam193 4 IOCs

Feb 25, 2025
PyPI
tclients-sdk 1.0.0, 1.0.2
MAL-2025-191886 kam193 4 IOCs

Feb 25, 2025
PyPI
snapshot-photo 0.0.3
MAL-2025-191871 kam193 4 IOCs

Feb 25, 2025
PyPI
enumer-iam 1.0.0
MAL-2025-191721 kam193 4 IOCs

Feb 25, 2025
PyPI
awscloud-clients-core 1.0.0
MAL-2025-191687 kam193 4 IOCs

Feb 25, 2025
PyPI
amzclients-sdk 1.0.0
MAL-2025-191679 kam193 4 IOCs

Feb 25, 2025
PyPI
alicloud-client-sdk 1.0.0
MAL-2025-191677 kam193 4 IOCs

Feb 25, 2025
PyPI
alicloud-client 1.0.0, 1.0.1, 1.0.2
MAL-2025-191676 kam193 4 IOCs

Feb 25, 2025
PyPI
acloud-clients 1.0.0, 1.0.1
MAL-2025-191673 kam193 4 IOCs

Feb 25, 2025
PyPI
acloud-client-uses 1.0.0
MAL-2025-191672 kam193 4 IOCs

Feb 25, 2025
PyPI
aclient-sdk 1.0.0
MAL-2025-191671 kam193 4 IOCs

Feb 25, 2025
PyPI
transaction-analyze 1.0.1, 1.0.2, 1.0.3, 1.0.4
MAL-2025-3011 reversing-labs, kam193 4 IOCs

Feb 24, 2025
PyPI
transaction-analysis 1.0.2, 0.1.0, 1.0.1
MAL-2025-3010 reversing-labs, kam193 4 IOCs

Feb 24, 2025
PyPI
coingenerator 1.0.1
MAL-2025-2948 reversing-labs, kam193 4 IOCs

Feb 24, 2025
PyPI
coinanalyze 1.0.7, 1.0.8, 1.0.9
MAL-2025-2947 reversing-labs, kam193 4 IOCs

Feb 24, 2025
PyPI
coinanalysis 1.0.2
MAL-2025-2946 reversing-labs, kam193 4 IOCs

Feb 24, 2025
PyPI
solders-utils 0.1.1
MAL-2025-3000 reversing-labs, kam193

Feb 21, 2025
PyPI
solana-utils 0.1.1, 0.1.2
MAL-2025-2999 reversing-labs, kam193

Feb 21, 2025
PyPI
transaction-utils 0.1.1, 0.1
MAL-2025-191909 kam193

Feb 21, 2025
PyPI
mstplotlib 3.10.2
MAL-2025-2345 oracle-using-macaron

Feb 20, 2025
PyPI
tiksing 0.0.1, 0.0.2
MAL-2025-191899 kam193 4 IOCs

Feb 18, 2025
PyPI
sintok 0.0.2
MAL-2025-191869 kam193 4 IOCs

Feb 18, 2025
PyPI
singtok 0.0.3, 0.0.1, 0.0.4
MAL-2025-191868 kam193 4 IOCs

Feb 18, 2025
PyPI
web3socket 0.0.1, 0.1.0, 0.1.1, 0.1.2, 0.1.3, 0.1.4
MAL-2025-3017 reversing-labs, kam193 4 IOCs

Feb 17, 2025
PyPI
web3node 0.1.0, 0.1.1, 0.1.2, 0.1.3
MAL-2025-3016 reversing-labs, kam193 4 IOCs

Feb 17, 2025
PyPI
w3socket 0.1.1, 0.1.0
MAL-2025-3014 reversing-labs, kam193 4 IOCs

Feb 17, 2025
PyPI
dcbotoffline3 0.1.0, 0.2.0
MAL-2025-191715 kam193 2 IOCs

Feb 15, 2025
PyPI
dcbot-online 0.1.0
MAL-2025-191714 kam193 2 IOCs

Feb 15, 2025
PyPI
network-utils-simple 1.3.3, 1.3.2, 1.3.8, 1.0.0, 1.1.0, 1.2.1, 1.2.2, 1.2.3, 1.2.4, 1.2.5, 1.2.6, 1.…
MAL-2025-191803 kam193 1 IOC

Feb 14, 2025
PyPI
watchitoring 0.1.0, 0.1.1
MAL-2025-3015 reversing-labs, kam193

Feb 13, 2025