Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,162 npm 223,990 PyPI 12,022 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,022 reports · Feed

PyPI
systoring 0.1.1, 0.1.2, 0.1.3, 0.1.4, 0.1.5, 0.1.6, 0.1.7, 0.1.8, 0.1.9, 0.1.10
MAL-2025-3004 reversing-labs, kam193

Feb 13, 2025
PyPI
speedtestpython 0.1
MAL-2025-3002 reversing-labs, kam193

Feb 13, 2025
PyPI
moonitoring 0.1.0
MAL-2025-2976 reversing-labs, kam193

Feb 13, 2025
PyPI
asynctestpython 0.1
MAL-2025-2939 reversing-labs, kam193

Feb 13, 2025
PyPI
asyncconfigreader 0.5, 0.6
MAL-2025-2938 reversing-labs, kam193

Feb 13, 2025
PyPI
asyncaiosignal 0.3, 0.4, 0.5
MAL-2025-2937 reversing-labs, kam193

Feb 13, 2025
PyPI
aiosignalasync 0.1, 0.2, 0.3
MAL-2025-2931 reversing-labs, kam193

Feb 13, 2025
PyPI
multis 1.0.0, 1.0.1, 1.0.3, 1.0.2, 1.0.4, 1.6.0, 1.5.0
MAL-2025-191797 kam193

Feb 13, 2025
PyPI
computestpspeedcompcomp 0.5
MAL-2025-191705 kam193

Feb 13, 2025
PyPI
computestpspeedcomp 0.3, 0.4, 0.6, 0.5, 0.7
MAL-2025-191704 kam193

Feb 13, 2025
PyPI
compute-st-speed 0.1
MAL-2025-191703 kam193

Feb 13, 2025
PyPI
bprintoor 0.2.2, 0.2.4, 0.2.5, 0.2.3, 0.2.6, 0.2.8, 0.2.7, 0.2.9, 0.2.10, 0.2.11
MAL-2025-191694 kam193

Feb 13, 2025
PyPI
bprinter 0.1.0, 0.2.0
MAL-2025-191693 kam193

Feb 13, 2025
PyPI
astronomios 0.6
MAL-2025-1964 reversing-labs, kam193 1 IOC

Feb 8, 2025
PyPI
astronomio 0.5
MAL-2025-1963 reversing-labs, kam193 1 IOC

Feb 8, 2025
PyPI
astrono2mio 0.6
MAL-2025-1962 reversing-labs, kam193 1 IOC

Feb 8, 2025
PyPI
updateuuid4 0.1.2
MAL-2025-191917 kam193

Feb 8, 2025
PyPI
pxz 1.1.2, 1.1.3, 1.1.4, 1.1.13, 1.1.6, 1.1.5, 1.1.7, 1.1.10, 1.1.12, 1.1.14, 1.1.8…
MAL-2025-1986 reversing-labs, kam193 1 IOC

Feb 5, 2025
PyPI
nflx-metaflow 1.0.0, 1.0.2
MAL-2025-1984 reversing-labs, kam193 1 IOC

Feb 5, 2025
PyPI
lightgboost 1.1.1, 1.1.2, 1.1.3, 1.1.4
MAL-2025-191781 kam193 1 IOC

Feb 5, 2025
PyPI
inkpy-jinja 0.0.1
MAL-2025-191766 kam193 1 IOC

Feb 5, 2025
PyPI
hellohackers 0.0.0
MAL-2025-1977 reversing-labs, kam193

Feb 5, 2025
PyPI
farooq4321 1.0.0
MAL-2025-1975 reversing-labs, kam193 1 IOC

Feb 4, 2025
PyPI
requests-x64 2.0.0
MAL-2025-1992 reversing-labs, kam193 1 IOC

Feb 4, 2025
PyPI
xmsgpy 0.0.1
MAL-2025-1009 reversing-labs

Feb 3, 2025
PyPI
web3-eth 6.0.0b6
MAL-2025-1006 reversing-labs

Feb 3, 2025
PyPI
utils-pencaws 0.1.0
MAL-2025-1002 reversing-labs

Feb 3, 2025
PyPI
utils-hex 1.0.0
MAL-2025-1001 reversing-labs

Feb 3, 2025
PyPI
utils-eth 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5
MAL-2025-1000 reversing-labs

Feb 3, 2025
PyPI
tonvia 1.4.3
MAL-2025-997 reversing-labs

Feb 3, 2025
PyPI
tonki 1.0.0
MAL-2025-996 reversing-labs

Feb 3, 2025
PyPI
toneo 1.4.3
MAL-2025-995 reversing-labs

Feb 3, 2025
PyPI
tan1-0 0.1.0, 1
MAL-2025-993 reversing-labs

Feb 3, 2025
PyPI
tan1 0.1.0
MAL-2025-992 reversing-labs

Feb 3, 2025
PyPI
shoots-bynet 0.1.1
MAL-2025-986 reversing-labs

Feb 3, 2025
PyPI
shinel 0.1
MAL-2025-984 reversing-labs

Feb 3, 2025
PyPI
shelley 0.1
MAL-2025-983 reversing-labs

Feb 3, 2025
PyPI
sajodecrypto 1
MAL-2025-981 reversing-labs

Feb 3, 2025
PyPI
sajadninja-sajad 1, 2.5
MAL-2025-980 reversing-labs

Feb 3, 2025
PyPI
sajadninja 1.0
MAL-2025-979 reversing-labs

Feb 3, 2025