Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,162 npm 223,990 PyPI 12,022 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,022 reports · Feed

PyPI
frexco-pip-requests 2.32.3, 2.32.31, 2.32.32
MAL-2024-11597 reversing-labs

Dec 9, 2024
PyPI
ffefesaewad 0.1
MAL-2024-11595 reversing-labs

Dec 9, 2024
PyPI
fake-usragent 1.5.2, 1.5.3, 1.5.4, 1.5.5, 1.5.6, 1.5.7, 1.5.8, 1.5.9, 1.6.0, 1.6.1, 1.6.2, 1.…
MAL-2024-11589 reversing-labs

Dec 9, 2024
PyPI
fabrlce 1.0.0
MAL-2024-11587 reversing-labs

Dec 9, 2024
PyPI
fabricee 1.0.0
MAL-2024-11586 reversing-labs

Dec 9, 2024
PyPI
exodushcate 1.7, 1.7.1, 1.7.2
MAL-2024-11585 reversing-labs

Dec 9, 2024
PyPI
eosio-signerz 0.1.0
MAL-2024-11583 reversing-labs

Dec 9, 2024
PyPI
devilpy 0.1, 0.2, 0.3, 0.4, 0.5, 0.6, 0.7
MAL-2024-11574 reversing-labs

Dec 9, 2024
PyPI
cutepy32 0.0.1
MAL-2024-11569 reversing-labs

Dec 9, 2024
PyPI
colourema 0.0.4, 0.0.5, 0.0.6, 0.4.6, 2.0.6
MAL-2024-11561 reversing-labs

Dec 9, 2024
PyPI
colority 1.0.1
MAL-2024-11559 reversing-labs

Dec 9, 2024
PyPI
cipherbcrypto 1.5
MAL-2024-11557 reversing-labs

Dec 9, 2024
PyPI
ccl-localstoragerss 1.1.2, 1.1.3
MAL-2024-11554 reversing-labs

Dec 9, 2024
PyPI
ccl-localstoragers 1, 1.1, 1.1.1
MAL-2024-11553 reversing-labs

Dec 9, 2024
PyPI
ccl-leveldbases 1.2.1, 1.2.2, 1.2.3
MAL-2024-11552 reversing-labs

Dec 9, 2024
PyPI
ccl-leveldbase 1.1, 1.2, 1.2.1
MAL-2024-11551 reversing-labs

Dec 9, 2024
PyPI
bugbounty 3.0
MAL-2024-11541 reversing-labs

Dec 9, 2024
PyPI
artifact-lab-3-package-0c8bce1c 1.0.0, 1.0.1
MAL-2024-11526 reversing-labs

Dec 9, 2024
PyPI
arielbogo 0.0.4
MAL-2024-11524 reversing-labs

Dec 9, 2024
PyPI
akobo 0.0.4
MAL-2024-11521 reversing-labs

Dec 9, 2024
PyPI
aiocpa 0.1.13, 0.1.14
MAL-2024-11518 reversing-labs

Dec 9, 2024
PyPI
afritonpy 1
MAL-2024-11516 reversing-labs

Dec 9, 2024
PyPI
afriton-py 1.6, 1.7
MAL-2024-11515 reversing-labs

Dec 9, 2024
PyPI
afriton 1.5, 1.6
MAL-2024-11514 reversing-labs

Dec 9, 2024
PyPI
afrit-name 1.3, 1.4, 1.5
MAL-2024-11513 reversing-labs

Dec 9, 2024
PyPI
48484efej8id 0.1
MAL-2024-11512 reversing-labs

Dec 9, 2024
PyPI
intgraphx 0.1
MAL-2025-936 reversing-labs, kam193 2 IOCs

Dec 5, 2024
PyPI
graphicsx 0.1
MAL-2025-931 reversing-labs, kam193 2 IOCs

Dec 5, 2024
PyPI
flamepro 0.1
MAL-2025-2964 reversing-labs, kam193 2 IOCs

Dec 5, 2024
PyPI
dbsxrchpro 0.1
MAL-2025-2955 reversing-labs, kam193 2 IOCs

Dec 5, 2024
PyPI
huggingleg2 0.1
MAL-2025-934 reversing-labs, kam193

Dec 4, 2024
PyPI
genz-translator 9000.0.1, 9001.0.1, 9002.0.1, 9003.0.1, 9004.0.1, 9005.0.1, 9007.0.1, 9006.0.1,…
MAL-2024-12275 kam193 2 IOCs

Dec 3, 2024
PyPI
my-service-manager 1.0.7, 1.0.6, 1.0.5, 1.0.4, 1.0.3, 1.0.2, 1.0.1, 1.0.0
MAL-2024-12309 kam193 1 IOC

Dec 1, 2024
PyPI
my-main-manager 1.0.9, 1.0.8, 1.0.11, 1.0.12
MAL-2024-12308 kam193 1 IOC

Dec 1, 2024
PyPI
foop 60.0.0
MAL-2025-927 reversing-labs, kam193

Dec 1, 2024
PyPI
datagov-harvester 20.0.0, 21.0.0
MAL-2025-913 reversing-labs, kam193

Dec 1, 2024
PyPI
crowdstrike-foundry 20.1.0, 20.2.0, 20.3.0
MAL-2025-912 reversing-labs, kam193

Dec 1, 2024
PyPI
bancor-simulation 20.0
MAL-2025-902 reversing-labs, kam193

Dec 1, 2024
PyPI
auth0-open-source-template 20.1.0
MAL-2025-901 reversing-labs, kam193

Dec 1, 2024
PyPI
apache-airflow-providers-edge 2.10.0
MAL-2025-900 reversing-labs, kam193

Dec 1, 2024