Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 240,458 npm 223,292 PyPI 12,017 RubyGems 4,319 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,017 reports · Feed

PyPI
starlette-healthchecks 1.3.1, 1.3.2
MAL-2026-16356 kam193, amazon-inspector 1 IOC

Sep 21, 2026
PyPI
rrs 0.4.105, 0.3.100, 0.4.106, 0.4.103, 0.4.102, 0.4.104, 0.3.5, 0.1.0, 0.1.3, 0.1.…
MAL-2026-16346 amazon-inspector, kam193

Sep 21, 2026
PyPI
urc 99.99.99
MAL-2026-16298 kam193

Sep 19, 2026
PyPI
py-venv-doctor 0.1.0, 0.1.1
MAL-2026-16296 kam193, amazon-inspector 1 IOC

Sep 18, 2026
PyPI
requests-auroras 2.34.2
MAL-2026-16274 kam193 1 IOC

Sep 17, 2026
PyPI
requests-triwes 2.34.2
MAL-2026-16275 kam193 1 IOC

Sep 17, 2026
PyPI
requests-asetwe 2.34.2
MAL-2026-16269 kam193, amazon-inspector

Sep 17, 2026
PyPI
index-forum 2.5.4
MAL-2026-16268 kam193, amazon-inspector

Sep 17, 2026
PyPI
pyjstat-smooth 1.5.0, 2.5.0, 2.5.1, 2.5.2, 2.5.3, 2.5.5, 2.5.6, 2.5.7, 2.5.8, 2.5.9, 2.5.10, 2…
MAL-2026-16267 kam193, amazon-inspector

Sep 17, 2026
PyPI
aiosendletter 0.2.0, 3.7, 3.8, 3.9, 4.0, 4.1, 4.3, 4.5, 4.6
MAL-2026-16264 kam193, amazon-inspector 1 IOC

Sep 17, 2026
PyPI
marketing-mcp 0.1.0
MAL-2026-16250 kam193, amazon-inspector 1 IOC

Sep 17, 2026
PyPI
trongappy 0.0.1
MAL-2026-16242 kam193, amazon-inspector 4 IOCs

Sep 16, 2026
PyPI
rak-lab-yoav-orca-zrktd2cp5hjmo4x7 9.9.9
MAL-2026-16241 kam193, amazon-inspector

Sep 16, 2026
PyPI
praetorian-mind-rce-test-2026 0.0.1, 0.0.2, 0.0.3
MAL-2026-16240 kam193, ossf-package-analysis, amazon-inspector 1 IOC

Sep 16, 2026
PyPI
licloud 0.2.7a0, 0.2.8
MAL-2026-16219 kam193, amazon-inspector

Sep 16, 2026
PyPI
cli-anything-ai-market 1.0.17, 1.0.18
MAL-2026-16212 amazon-inspector, kam193

Sep 16, 2026
PyPI
faiss-cpu-avx512 1.9.0, 1.9.1, 1.9.2, 1.9.3, 1.9.4, 1.9.5, 1.9.6, 1.9.7
MAL-2026-16203 5 IOCs

Sep 14, 2026
PyPI
chroma-client 0.5.7
MAL-2026-16143 kam193, amazon-inspector 3 IOCs

Sep 13, 2026
PyPI
python-fork 0.1.0, 0.1.1
MAL-2026-16142 kam193, amazon-inspector

Sep 12, 2026
PyPI
platform-telemetry-client 1.0.0
MAL-2026-16141 kam193 2 IOCs

Sep 11, 2026
PyPI
langgrap 0.2.45
MAL-2026-16133 kam193, amazon-inspector 3 IOCs

Sep 11, 2026
PyPI
transfomers 4.44.2
MAL-2026-16136 kam193, amazon-inspector 3 IOCs

Sep 11, 2026
PyPI
ollamaa 0.4.2
MAL-2026-16134 kam193, amazon-inspector 3 IOCs

Sep 11, 2026
PyPI
openaii 1.55.3
MAL-2026-16135 kam193, amazon-inspector 3 IOCs

Sep 11, 2026
PyPI
aitextutils-py 0.1.0, 0.1.1
MAL-2026-16131 kam193, amazon-inspector 6 IOCs

Sep 11, 2026
PyPI
aitextkit-py 0.1.0, 0.1.1
MAL-2026-16130 kam193, amazon-inspector 6 IOCs

Sep 11, 2026
PyPI
pymem-win 1.14.0, 1.14.1, 1.14.4, 1.14.5, 1.14.6
MAL-2026-16128 kam193, amazon-inspector 1 IOC

Sep 11, 2026
PyPI
eth-account-web3 0.14.0
MAL-2026-16127 kam193, amazon-inspector

Sep 11, 2026
PyPI
web3-eth-account 0.14.0
MAL-2026-16129 kam193, amazon-inspector

Sep 11, 2026
PyPI
lucy-python-script-2030 0.1.1, 0.1.2
MAL-2026-16125 kam193, amazon-inspector

Sep 10, 2026
PyPI
pylever 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5, 1.0.6, 1.0.7, 1.0.8, 1.0.9, 1.0.10, 1…
MAL-2026-16122 kam193, amazon-inspector

Sep 10, 2026
PyPI
bq-sdist-probe-vrp 0.0.1
MAL-2026-16099 amazon-inspector

Sep 9, 2026
PyPI
bq-build-probe-vrp-2026 0.2.0
MAL-2026-16098 amazon-inspector

Sep 9, 2026
PyPI
websetup 0.1.0
MAL-2026-16121 amazon-inspector 1 IOC

Sep 9, 2026
PyPI
databricks-webapp-navigation-homepage 999.0.0
MAL-2026-16080 kam193

Sep 9, 2026
PyPI
telegram-helper 0.1.1, 0.1.2
MAL-2026-16017 kam193, amazon-inspector

Sep 7, 2026
PyPI
cv-train 0.0.5, 99.0.0
MAL-2026-16016 kam193, amazon-inspector

Sep 7, 2026
PyPI
dac-tools 999.0.0
MAL-2026-15938 kam193, ossf-package-analysis, amazon-inspector

Sep 6, 2026
PyPI
minecraftmodes 0.3.3
MAL-2026-15937 kam193 4 IOCs

Sep 6, 2026
PyPI
trongridew 0.0.1
MAL-2026-15936 kam193, amazon-inspector 4 IOCs

Sep 5, 2026