Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,162 npm 223,990 PyPI 12,022 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,022 reports · Feed

PyPI
omigo-data-analytics 20.1.0
MAL-2024-12318 kam193

Dec 1, 2024
PyPI
pycryptographylibv3 1.1.0
MAL-2024-12330 kam193 1 IOC

Nov 30, 2024
PyPI
pipcolorpkgv2 1.1.0
MAL-2024-12324 kam193 1 IOC

Nov 30, 2024
PyPI
newpackagetest2025 1.0.0
MAL-2024-12313 kam193

Nov 30, 2024
PyPI
newpackagetest2024 1.0.0
MAL-2024-12312 kam193

Nov 30, 2024
PyPI
christmasmiraclemaker 1.0.0
MAL-2024-12234 kam193

Nov 30, 2024
PyPI
calctestchristmas 1.0.0
MAL-2024-12228 kam193

Nov 30, 2024
PyPI
calcnotepad 1.0.0
MAL-2024-12227 kam193

Nov 30, 2024
PyPI
calccc 1.0.0
MAL-2024-12226 kam193

Nov 30, 2024
PyPI
calc123lorc 1.0.0
MAL-2024-12225 kam193

Nov 30, 2024
PyPI
bettercolorstesting 1.0.0
MAL-2024-12218 kam193

Nov 30, 2024
PyPI
bestcolorsever3 1.0.0
MAL-2024-12217 kam193

Nov 30, 2024
PyPI
bestcolorsever2 1.0.0
MAL-2024-12216 kam193

Nov 30, 2024
PyPI
bestcolorsever 1.0.0
MAL-2024-12215 kam193

Nov 30, 2024
PyPI
nirohf-reverse-shell 0.6, 2.6
MAL-2024-12314 kam193

Nov 29, 2024
PyPI
driftme 1.0
MAL-2024-12259 kam193 2 IOCs

Nov 29, 2024
PyPI
catme 1.0
MAL-2024-12230 kam193 2 IOCs

Nov 29, 2024
PyPI
trove4j 0.1.1
MAL-2025-998 reversing-labs, kam193 1 IOC

Nov 29, 2024
PyPI
shoots-flutter 0.1.1
MAL-2025-987 reversing-labs, kam193 1 IOC

Nov 29, 2024
PyPI
shoots-api-test 0.1.1
MAL-2025-985 reversing-labs, kam193 1 IOC

Nov 29, 2024
PyPI
pytest-tt-ddriven 0.1.1
MAL-2025-960 reversing-labs, kam193 1 IOC

Nov 29, 2024
PyPI
kotlin-stdlib-jdk8 99.1.1
MAL-2025-939 reversing-labs, kam193 1 IOC

Nov 29, 2024
PyPI
byted-df 99.1.1
MAL-2025-905 reversing-labs, kam193 1 IOC

Nov 29, 2024
PyPI
dgsinstaller 1.0.0, 1.0.1
MAL-2024-12254 kam193

Nov 27, 2024
PyPI
ccsinstaller 1.0.0, 1.0.1, 1.0.2
MAL-2024-12231 kam193

Nov 27, 2024
PyPI
dftester-pip 0.0.1
MAL-2024-11575 reversing-labs, kam193 2 IOCs

Nov 27, 2024
PyPI
cometlogger 0.1
MAL-2024-11562 reversing-labs, kam193 4 IOCs

Nov 24, 2024
PyPI
newpipv3 0.1.0
MAL-2024-10877 ossf-package-analysis

Nov 22, 2024
PyPI
blackamerxs 0.1
MAL-2024-11537 reversing-labs, kam193

Nov 22, 2024
PyPI
random-security-test-pkg 1.1.0, 1.1.3
MAL-2024-12335 kam193

Nov 17, 2024
PyPI
instacart-roulette-daemon-client 0.0.1, 10.0.999
MAL-2024-12291 kam193

Nov 17, 2024
PyPI
zebo 0.1.0
MAL-2024-11751 reversing-labs, kam193 1 IOC

Nov 16, 2024
PyPI
pycalculater 0.1
MAL-2024-11668 reversing-labs, kam193 1 IOC

Nov 16, 2024
PyPI
discconnect 0.1, 0.2, 0.4, 0.5
MAL-2024-11576 reversing-labs, kam193 1 IOC

Nov 16, 2024
PyPI
reverse434343 1.0.0
MAL-2024-11694 reversing-labs, kam193

Nov 14, 2024
PyPI
reverse4343 1.0.0
MAL-2024-11693 reversing-labs, kam193

Nov 14, 2024
PyPI
eosio-signer 0.0.1, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5, 1.0.6, 1.0.7, 1.0.8
MAL-2024-11582 reversing-labs, kam193 1 IOC

Nov 14, 2024
PyPI
ansishade 0.1.0
MAL-2024-12190 kam193 1 IOC

Nov 13, 2024
PyPI
tingetone 0.0.1, 0.0.2
MAL-2024-11727 reversing-labs, kam193 1 IOC

Nov 13, 2024
PyPI
backwwii 0.1.0
MAL-2024-12212 kam193 1 IOC

Nov 12, 2024