Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,162 npm 223,990 PyPI 12,022 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,022 reports · Feed

PyPI
sajadnewninja 1
MAL-2025-978 reversing-labs

Feb 3, 2025
PyPI
sajadnewenc 1
MAL-2025-977 reversing-labs

Feb 3, 2025
PyPI
reqest-dexfree 0.0.1
MAL-2025-967 reversing-labs

Feb 3, 2025
PyPI
pylint-redis 0.1.1
MAL-2025-958 reversing-labs

Feb 3, 2025
PyPI
pyethereum2345 0.10
MAL-2025-957 reversing-labs

Feb 3, 2025
PyPI
pyethereum 1.0.0
MAL-2025-956 reversing-labs

Feb 3, 2025
PyPI
prime-math 1.0.0
MAL-2025-952 reversing-labs

Feb 3, 2025
PyPI
petace 0.1.1
MAL-2025-950 reversing-labs

Feb 3, 2025
PyPI
newencsajad 1
MAL-2025-946 reversing-labs

Feb 3, 2025
PyPI
lransrlasn 0.1
MAL-2025-943 reversing-labs

Feb 3, 2025
PyPI
langer-update 1.0.1
MAL-2025-941 reversing-labs

Feb 3, 2025
PyPI
hhxy 0.1, 0.2.1, 0.2.2, 0.2.3, 0.2.4
MAL-2025-932 reversing-labs

Feb 3, 2025
PyPI
fgh 1.0.0
MAL-2025-924 reversing-labs

Feb 3, 2025
PyPI
eth-web3 6.0.0b6, 6.0.0b7, 6.0.1
MAL-2025-921 reversing-labs

Feb 3, 2025
PyPI
devilfree 0.9.0, 1.0, 6.0
MAL-2025-917 reversing-labs

Feb 3, 2025
PyPI
devilcore 1, 2
MAL-2025-916 reversing-labs

Feb 3, 2025
PyPI
bytedance-chat 0.1.1
MAL-2025-906 reversing-labs

Feb 3, 2025
PyPI
bugscanx 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5, 1.0.6, 1.0.7, 1.0.8, 1.0.9, 1.2.0, 1.2.1, 1.…
MAL-2025-904 reversing-labs

Feb 3, 2025
PyPI
breqest 2.32.3
MAL-2025-903 reversing-labs

Feb 3, 2025
PyPI
alrsnlaseast 1.0, 2.0
MAL-2025-899 reversing-labs

Feb 3, 2025
PyPI
account-eth 0.7.0, 0.7.1
MAL-2025-898 reversing-labs

Feb 3, 2025
PyPI
novatwo 0.1
MAL-2025-1985 reversing-labs, kam193 3 IOCs

Feb 2, 2025
PyPI
web3imports 1.1.0
MAL-2025-2012 reversing-labs, kam193 2 IOCs

Feb 1, 2025
PyPI
asynchelpers 1.2.0
MAL-2025-1965 reversing-labs, kam193 2 IOCs

Feb 1, 2025
PyPI
markitanalysis 0.0.1, 0.1.0
MAL-2025-2974 reversing-labs, kam193

Jan 26, 2025
PyPI
getpublicip 1.0.1
MAL-2025-191738 kam193

Jan 26, 2025
PyPI
rqsts 2.28.1
MAL-2025-1995 reversing-labs, kam193

Jan 25, 2025
PyPI
requesttss 2.28.1, 1.1.1
MAL-2025-1994 reversing-labs, kam193

Jan 25, 2025
PyPI
requestsa 2.28.1
MAL-2025-1993 reversing-labs, kam193

Jan 25, 2025
PyPI
requesra 2.28.1
MAL-2025-1991 reversing-labs, kam193

Jan 25, 2025
PyPI
reques 2.28.1
MAL-2025-1990 reversing-labs, kam193

Jan 25, 2025
PyPI
reque 2.28.1
MAL-2025-1989 reversing-labs, kam193

Jan 25, 2025
PyPI
superline 0.1
MAL-2025-1996 reversing-labs, kam193

Jan 25, 2025
PyPI
mlc-llm-nightly-cu123 9.9.9
MAL-2025-1983 reversing-labs, kam193 1 IOC

Jan 21, 2025
PyPI
mlc-ai-nightly-rocm62 9.9.9
MAL-2025-1982 reversing-labs, kam193 1 IOC

Jan 21, 2025
PyPI
mlc-ai-nightly-cu123 9.9.9
MAL-2025-1981 reversing-labs, kam193 1 IOC

Jan 21, 2025
PyPI
mlc-ai-nightly 9.9.9, 9.9.99, 0.0.1
MAL-2025-1980 reversing-labs, kam193 1 IOC

Jan 21, 2025
PyPI
awsglueml 6.1.4
MAL-2025-2942 reversing-labs, kam193 1 IOC

Jan 14, 2025
PyPI
awsgluedq 0.1.3, 6.1.3, 6.1.4
MAL-2025-2941 reversing-labs, kam193 1 IOC

Jan 14, 2025
PyPI
aws-glue 6.1.4, 6.1.5
MAL-2025-2940 reversing-labs, kam193 1 IOC

Jan 14, 2025