Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,162 npm 223,990 PyPI 12,022 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,022 reports · Feed

PyPI
amzn-awsglue 6.1.4, 6.1.5
MAL-2025-2936 reversing-labs, kam193 1 IOC

Jan 14, 2025
PyPI
amzn-aws-glue-ml-libs-python 6.1.4, 6.1.5
MAL-2025-2935 reversing-labs, kam193 1 IOC

Jan 14, 2025
PyPI
utf-cleaner 3.4.1, 3.4.2, 3.4.0, 3.3.7, 3.3.8, 3.3.9
MAL-2025-73 ossf-package-analysis, kam193 2 IOCs

Jan 10, 2025
PyPI
javascan 0.1, 0.2, 0.3, 0.4, 0.5
MAL-2025-1978 reversing-labs, kam193 2 IOCs

Jan 10, 2025
PyPI
just-test-framework 99.99.99, 99.99.999
MAL-2025-938 reversing-labs, kam193 2 IOCs

Jan 10, 2025
PyPI
just-framework 1.3.3
MAL-2025-191770 kam193 2 IOCs

Jan 10, 2025
PyPI
djangoframework-test 3.3.3
MAL-2025-191720 kam193 2 IOCs

Jan 10, 2025
PyPI
wdwq 1.4.3
MAL-2025-1005 reversing-labs, kam193 1 IOC

Jan 7, 2025
PyPI
ilovenyxxbait 0.1.0
MAL-2025-49

Jan 2, 2025
PyPI
ilovenyxx 0.1.0
MAL-2025-48

Jan 2, 2025
PyPI
requetses 0.1, 0.5
MAL-2025-974 reversing-labs, kam193

Dec 31, 2024
PyPI
hugginglega 1.1, 1.2, 1.0, 1.3, 2.0
MAL-2025-935 reversing-labs, kam193 2 IOCs

Dec 29, 2024
PyPI
dscss 1.0.1, 1.0.0
MAL-2024-12185 oracle-using-macaron

Dec 29, 2024
PyPI
selenium-plugin 1.0.0
MAL-2025-982 reversing-labs, kam193 2 IOCs

Dec 28, 2024
PyPI
sysfunc 0.1, 0.2, 0.3, 0.4, 0.5, 0.6, 0.7, 0.8
MAL-2025-991 reversing-labs, kam193 6 IOCs

Dec 26, 2024
PyPI
syscontrol 0.1, 0.2
MAL-2025-990 reversing-labs, kam193 6 IOCs

Dec 26, 2024
PyPI
subsys-client 0.1, 0.2
MAL-2025-988 reversing-labs, kam193 6 IOCs

Dec 26, 2024
PyPI
oscontrol 0.1, 0.2, 0.3, 0.4, 0.5, 0.6, 0.7, 0.8
MAL-2025-949 reversing-labs, kam193 6 IOCs

Dec 26, 2024
PyPI
opshub 0.1
MAL-2025-948 reversing-labs, kam193 6 IOCs

Dec 26, 2024
PyPI
rreqest 2.32.3
MAL-2025-976 reversing-labs, kam193 1 IOC

Dec 24, 2024
PyPI
reqzest 2.32.2, 2.32.3
MAL-2025-975 reversing-labs, kam193 1 IOC

Dec 24, 2024
PyPI
requeszs 2.32.3
MAL-2025-973 reversing-labs, kam193 1 IOC

Dec 24, 2024
PyPI
reqiest 2.32.2, 2.32.3
MAL-2025-969 reversing-labs, kam193 1 IOC

Dec 24, 2024
PyPI
reqeuts 2.32.2, 2.32.3
MAL-2025-968 reversing-labs, kam193 1 IOC

Dec 24, 2024
PyPI
reqest 0.0.1, 2.32.2, 2.32.3
MAL-2025-966 reversing-labs, kam193 1 IOC

Dec 24, 2024
PyPI
reqesst 2.32.3
MAL-2025-965 reversing-labs, kam193 1 IOC

Dec 24, 2024
PyPI
flasl 3.1.8.dev0, 3.1.9.dev0
MAL-2025-926 reversing-labs, kam193 1 IOC

Dec 24, 2024
PyPI
fkask 3.1.8.dev0
MAL-2025-925 reversing-labs, kam193 1 IOC

Dec 24, 2024
PyPI
fflask 3.1.8.dev0, 3.1.9.dev0, 3.2.0.dev0
MAL-2025-923 reversing-labs, kam193 1 IOC

Dec 24, 2024
PyPI
falask 3.1.8.dev0
MAL-2025-922 reversing-labs, kam193 1 IOC

Dec 24, 2024
PyPI
requesr 2.32.3, 2.32.2
MAL-2024-12338 kam193 1 IOC

Dec 24, 2024
PyPI
handyfiles 0.0.1
MAL-2024-12282 kam193

Dec 24, 2024
PyPI
filecraft 0.0.1
MAL-2024-12272 kam193

Dec 24, 2024
PyPI
piepunk 6.9.0, 6.9.1, 6.9.3
MAL-2024-12322 kam193

Dec 19, 2024
PyPI
utilitypyfunc 0.1.0, 0.3.0, 0.4.0, 0.5.0
MAL-2025-999 reversing-labs, kam193

Dec 17, 2024
PyPI
discordbotstatus 0.6.7
MAL-2025-920 reversing-labs, kam193 1 IOC

Dec 17, 2024
PyPI
discordbotpresence 0.6.7
MAL-2025-919 reversing-labs, kam193 1 IOC

Dec 17, 2024
PyPI
presudo-generate 1.0.0
MAL-2025-951 reversing-labs, kam193

Dec 16, 2024
PyPI
noway-back 1.0.0
MAL-2025-947 reversing-labs, kam193

Dec 16, 2024
PyPI
langer-updater 1.0.2, 1.0.4, 1.0.5, 1.0.6, 1.0.7, 1.0.8
MAL-2025-942 reversing-labs, kam193

Dec 16, 2024