Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,162 npm 223,990 PyPI 12,022 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,022 reports · Feed

PyPI
lan-clean 1.0.1, 1.0.0
MAL-2025-940 reversing-labs, kam193

Dec 16, 2024
PyPI
code-tracker 1.0.0
MAL-2025-910 reversing-labs, kam193

Dec 16, 2024
PyPI
code-suggester 1.0.0
MAL-2025-909 reversing-labs, kam193

Dec 16, 2024
PyPI
code-beautifyer 1.0.0
MAL-2025-908 reversing-labs, kam193

Dec 16, 2024
PyPI
clean-packager 1.0.0
MAL-2025-907 reversing-labs, kam193

Dec 16, 2024
PyPI
zip-me 1.0.0
MAL-2024-12372 kam193

Dec 16, 2024
PyPI
threadfluent 0.1
MAL-2025-994 reversing-labs, kam193 3 IOCs

Dec 14, 2024
PyPI
httpfluent 0.1
MAL-2025-933 reversing-labs, kam193 3 IOCs

Dec 14, 2024
PyPI
websynapse 0.1
MAL-2025-1007 reversing-labs, kam193 3 IOCs

Dec 14, 2024
PyPI
rwoka 0.1.2, 0.1.1, 0.1.3
MAL-2024-12342 kam193 3 IOCs

Dec 14, 2024
PyPI
python-bitget-wrapper 0.3.5, 0.3.7
MAL-2025-963 reversing-labs, kam193 2 IOCs

Dec 12, 2024
PyPI
python-bitget-request 3.9.5, 4.9.5
MAL-2025-962 reversing-labs, kam193 2 IOCs

Dec 12, 2024
PyPI
python-bitget-connect 0.3.9
MAL-2025-961 reversing-labs, kam193 2 IOCs

Dec 12, 2024
PyPI
python-bitget-api 3.1.5, 3.3.5
MAL-2024-12333 kam193 2 IOCs

Dec 12, 2024
PyPI
urlcon 0.1.0rc1, 0.1.0, 1.0.0
MAL-2024-11737 reversing-labs

Dec 9, 2024
PyPI
unzipxz 0.0.1
MAL-2024-11735 reversing-labs

Dec 9, 2024
PyPI
treadtools 1.0.0, 1.0.1
MAL-2024-11733 reversing-labs

Dec 9, 2024
PyPI
testlibrary128982 0.1
MAL-2024-11725 reversing-labs

Dec 9, 2024
PyPI
testerpackage123 0.1
MAL-2024-11724 reversing-labs

Dec 9, 2024
PyPI
test128123612 0.1
MAL-2024-11723 reversing-labs

Dec 9, 2024
PyPI
test-hwp-uwpp 0.1
MAL-2024-11721 reversing-labs

Dec 9, 2024
PyPI
test-hwp-uwp 0.1
MAL-2024-11720 reversing-labs

Dec 9, 2024
PyPI
taoreg 0.1.1, 0.1.2
MAL-2024-11718 reversing-labs

Dec 9, 2024
PyPI
sysconx4 0.1.1
MAL-2024-11717 reversing-labs

Dec 9, 2024
PyPI
solana-account-sdk 1.0.0, 1.0.1
MAL-2024-11710 reversing-labs

Dec 9, 2024
PyPI
shokobo 0.0.4
MAL-2024-11706 reversing-labs

Dec 9, 2024
PyPI
rkpairip 3.0, 4.0
MAL-2024-11697 reversing-labs

Dec 9, 2024
PyPI
rkjp 1.0, 2.0
MAL-2024-11696 reversing-labs

Dec 9, 2024
PyPI
rk-pairip 1.0
MAL-2024-11695 reversing-labs

Dec 9, 2024
PyPI
requestsuuuj 2.32.4
MAL-2024-11691 reversing-labs

Dec 9, 2024
PyPI
requests99999999 2.32.3
MAL-2024-11690 reversing-labs

Dec 9, 2024
PyPI
requests-2-32-3 2.32.3
MAL-2024-11689 reversing-labs

Dec 9, 2024
PyPI
replication-delay-client111 1.0.0
MAL-2024-11688 reversing-labs

Dec 9, 2024
PyPI
py-colorprinting 0.1, 0.1.1, 0.1.2, 0.1.3, 0.1.5
MAL-2024-11666 reversing-labs

Dec 9, 2024
PyPI
otci-openthread 9.9.9
MAL-2024-11652 reversing-labs

Dec 9, 2024
PyPI
notoken887 0.1.0, 0.1.1, 1.1.5, 1.1.6, 1.1.8, 1.1.9, 1.2, 1.21, 1.22, 1.22.1, 1.22.3, 1.22…
MAL-2024-11648 reversing-labs

Dec 9, 2024
PyPI
newpipv1 0.1.0
MAL-2024-11645 reversing-labs

Dec 9, 2024
PyPI
nasrpy 0.2
MAL-2024-11644 reversing-labs

Dec 9, 2024
PyPI
lib-defender 0.5.0, 0.9.0
MAL-2024-11625 reversing-labs

Dec 9, 2024
PyPI
infoind 3897
MAL-2024-11615 reversing-labs

Dec 9, 2024