Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

12,022 reports · Feed

  • PyPI
    j5gnpfweguiwerbngpiutbgn0iutb0pfwfef 0.0.1
    MAL-2024-11618 reversing-labs, kam193 1 IOC
  • PyPI
    j5gnpfweguiwerbngpiutbgn0iutb0pfwef 0.0.1
    MAL-2024-11617 reversing-labs, kam193 1 IOC
  • PyPI
    ggghhhrrr 0.1, 0.3
    MAL-2024-11600 reversing-labs, kam193 1 IOC
  • PyPI
    iufgbewroibgfowiebc 0.0.2, 0.0.1
    MAL-2024-9306 ossf-package-analysis, kam193 1 IOC
  • PyPI
    web3-py-tools 0.0.1, 0.0.2, 0.0.3, 0.0.4
    MAL-2024-10205 reversing-labs
  • PyPI
    walletdecoderss 1.5.2
    MAL-2024-10191 reversing-labs
  • PyPI
    walletdecoders 1.5, 1.5.1
    MAL-2024-10190 reversing-labs
  • PyPI
    utilitytools 0.0.1, 0.0.2, 0.0.3, 0.0.5, 0.0.6, 0.0.7, 0.0.8, 0.0.9
    MAL-2024-10186 reversing-labs
  • PyPI
    utilitytool 0.0.2
    MAL-2024-10185 reversing-labs
  • PyPI
    url-validatorindx 0.0.7, 0.0.8, 0.0.9, 0.1.0
    MAL-2024-10182 reversing-labs
  • PyPI
    trustdecoderss 1.2, 1.9.8, 2, 2.1
    MAL-2024-10178 reversing-labs
  • PyPI
    trustdecoders 1.5, 1.6, 1.7, 1.8, 1.9, 1.9.1, 1.9.2, 1.9.4, 1.9.5
    MAL-2024-10177 reversing-labs
  • PyPI
    trondecoderss 1.4.5
    MAL-2024-10176 reversing-labs
  • PyPI
    trondecoders 1.4.1, 1.4.2, 1.4.3, 1.4.4
    MAL-2024-10175 reversing-labs
  • PyPI
    testkaralpoc45654 1.0.0
    MAL-2024-10171 reversing-labs
  • PyPI
    test24234 0.1, 0.4
    MAL-2024-10170 reversing-labs
  • PyPI
    test-package-sample 0.1.1
    MAL-2024-10169 reversing-labs
  • PyPI
    spl-token 0.1.1, 0.1.2, 0.1.3, 0.1.4, 0.1.5
    MAL-2024-10167 reversing-labs
  • PyPI
    solana-transfer 0.1.1
    MAL-2024-10165 reversing-labs
  • PyPI
    solana-transaction 0.1.0, 1.0.0, 1.0.1, 1.0.2, 1.0.4, 1.0.5, 1.0.6, 1.0.7
    MAL-2024-10164 reversing-labs
  • PyPI
    solana-token 1.0.1, 1.0.2, 0.0.2, 0.0.1
    MAL-2024-10163 reversing-labs, kam193 6 IOCs
  • PyPI
    sol-token 1.0.2
    MAL-2024-10162 reversing-labs
  • PyPI
    rock51 1.0.0
    MAL-2024-10156 reversing-labs
  • PyPI
    reverse-shell 0.1, 0.2, 0.3, 0.7, 0.9, 1.0, 1.1, 1.2, 1.3, 1.4, 1.5, 0.5, 0.8
    MAL-2024-10155 reversing-labs
  • PyPI
    reportgenpub 0.1, 0.2
    MAL-2024-10153 reversing-labs
  • PyPI
    rectutils 1.1
    MAL-2024-10151 reversing-labs
  • PyPI
    raimbowxyz 0.1
    MAL-2024-10150 reversing-labs
  • PyPI
    pyzelf 2.0.1
    MAL-2024-10149 reversing-labs
  • PyPI
    pytypier 1.0.2
    MAL-2024-10147 reversing-labs
  • PyPI
    pytoileur 1.0.0, 1.0.1, 1.0.2
    MAL-2024-10141 reversing-labs
  • PyPI
    python-consul2-hh 999.9.9
    MAL-2024-10132 reversing-labs
  • PyPI
    pyspliter 1.0.2
    MAL-2024-10124 reversing-labs
  • PyPI
    pysoltransfer 1.0.0, 1.0.1
    MAL-2024-10123 reversing-labs
  • PyPI
    pysoltoken 1.0.0, 1.0.1, 1.0.2
    MAL-2024-10122 reversing-labs
  • PyPI
    pysigner 0.0.1
    MAL-2024-10121 reversing-labs
  • PyPI
    pypackscraper 1.0.4, 1.0.5, 1.0.6, 1.1.0
    MAL-2024-10120 reversing-labs
  • PyPI
    pycolorlib 0.0.1
    MAL-2024-10114 reversing-labs
  • PyPI
    pycoloramade 1.4.2, 1.5.2, 1.5.9, 1.6.9, 1.7.9, 1.8.9
    MAL-2024-10113 reversing-labs
  • PyPI
    py-solana-cli 1.2, 1.2.4, 1.3, 1.4
    MAL-2024-10110 reversing-labs
  • PyPI
    ptmpl 0.2.0, 0.2.1, 0.2.2, 0.2.3, 0.2.6, 0.2.7, 0.2.8, 0.2.9, 0.2.10, 0.2.11, 0.2.12,…
    MAL-2024-10109 reversing-labs