Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,162 npm 223,990 PyPI 12,022 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,022 reports · Feed

PyPI
protoc 0.0.1, 0.0.2
MAL-2024-10107 reversing-labs

Oct 16, 2024
PyPI
phantomdecoderss 1.6.8, 1.6.9
MAL-2024-10104 reversing-labs

Oct 16, 2024
PyPI
phantomdecoders 1.6.1, 1.6.2, 1.6.3, 1.6.4, 1.6.5, 1.6.7
MAL-2024-10103 reversing-labs

Oct 16, 2024
PyPI
pdsuax4 0.0.1
MAL-2024-10102 reversing-labs

Oct 16, 2024
PyPI
pdsuax 0.0.2
MAL-2024-10101 reversing-labs

Oct 16, 2024
PyPI
ml-linear-regression-lib 1.1.3
MAL-2024-10045 reversing-labs

Oct 16, 2024
PyPI
marshall 3.8.5.1
MAL-2024-10041 reversing-labs

Oct 16, 2024
PyPI
javier-vidal 0.3.1, 0.3.2, 1.0.1, 1.0.2
MAL-2024-10036 reversing-labs

Oct 16, 2024
PyPI
h99ai 0.1.0
MAL-2024-10033 reversing-labs

Oct 16, 2024
PyPI
exodusdecoderss 1.4.3, 1.4.4
MAL-2024-10026 reversing-labs

Oct 16, 2024
PyPI
exodusdecoders 1.4.1, 1.4.2
MAL-2024-10025 reversing-labs

Oct 16, 2024
PyPI
eth-account-api 0.0.1, 0.0.2, 0.0.3, 0.0.4, 0.1.0, 1.0.0
MAL-2024-9973 reversing-labs

Oct 16, 2024
PyPI
crytic-compilers 0.3.7, 0.3.8, 0.3.9, 0.3.10, 0.3.11
MAL-2024-9965 reversing-labs

Oct 16, 2024
PyPI
cryptoaitools 0.1, 0.2, 0.3, 0.4, 0.5, 0.6, 0.7
MAL-2024-9964 reversing-labs

Oct 16, 2024
PyPI
class-py 1.0.0
MAL-2024-9961 reversing-labs

Oct 16, 2024
PyPI
cipherbcryptors 1.3.1, 1.3.2
MAL-2024-9960 reversing-labs

Oct 16, 2024
PyPI
cipherbcryptor 1.2, 1.2.1, 1.2.2, 1.2.3, 1.3, 1.5
MAL-2024-9959 reversing-labs

Oct 16, 2024
PyPI
calendar-extender 0.1, 0.2
MAL-2024-9958 reversing-labs

Oct 16, 2024
PyPI
bughunter9 9.5, 9.6, 9.7, 9.8, 9.9, 9.10, 9.11, 9.13, 9.14, 9.15, 9.16, 9.17, 9.18, 9.19, …
MAL-2024-9953 reversing-labs

Oct 16, 2024
PyPI
blypack 0.1, 0.2, 0.3, 0.4, 0.5
MAL-2024-9950 reversing-labs

Oct 16, 2024
PyPI
atomicdecoderss 1.6.4, 1.6.5, 1.6.6
MAL-2024-9946 reversing-labs

Oct 16, 2024
PyPI
atomicdecoders 1.6, 1.6.1, 1.6.2
MAL-2024-9945 reversing-labs

Oct 16, 2024
PyPI
artifact-lab-3-package-e90915e1 0.1.1, 0.1.3
MAL-2024-9942 reversing-labs

Oct 16, 2024
PyPI
aiogt 1.0.0rc1, 1.0.0rc2, 1.0.0, 1.0.0.post1
MAL-2024-9936 reversing-labs

Oct 16, 2024
PyPI
maliciouspackage 0.5, 0.4, 0.3, 0.2, 0.1
MAL-2024-12303 kam193

Oct 15, 2024
PyPI
lwplugin 0.0.5
MAL-2024-12301 kam193

Oct 14, 2024
PyPI
luna-paysure 0.7.5, 0.7.2, 0.7.3, 0.7.1, 0.7.4
MAL-2024-11627 reversing-labs, kam193 1 IOC

Oct 14, 2024
PyPI
robloxrequestsss 0.1
MAL-2024-11698 reversing-labs, kam193 1 IOC

Oct 13, 2024
PyPI
discordmessager 0.1, 0.2, 0.3
MAL-2024-11577 reversing-labs, kam193 1 IOC

Oct 13, 2024
PyPI
fake-usreagant 0.0.3
MAL-2024-12270 kam193

Oct 8, 2024
PyPI
useregent-generator 1.6.5
MAL-2024-11741 reversing-labs, kam193 5 IOCs

Oct 7, 2024
PyPI
user-random-agent-user 1.7.0
MAL-2024-11740 reversing-labs, kam193 5 IOCs

Oct 7, 2024
PyPI
user-rand-agnt-user 1.8.7
MAL-2024-11739 reversing-labs, kam193 5 IOCs

Oct 7, 2024
PyPI
user-gen-agent-random 1.6.8, 1.6.9, 1.7.0
MAL-2024-11738 reversing-labs, kam193 5 IOCs

Oct 7, 2024
PyPI
ua-agent-generator 1.6.7
MAL-2024-11734 reversing-labs, kam193 5 IOCs

Oct 7, 2024
PyPI
sol-regex-gener 1.6.7
MAL-2024-11709 reversing-labs, kam193 5 IOCs

Oct 7, 2024
PyPI
gen-user-random-agent 1.7.0
MAL-2024-11599 reversing-labs, kam193 5 IOCs

Oct 7, 2024
PyPI
fake-usreagent 1.6.3
MAL-2024-11590 reversing-labs, kam193 5 IOCs

Oct 7, 2024
PyPI
crypto-regex-gener 1.6.7
MAL-2024-11566 reversing-labs, kam193 5 IOCs

Oct 7, 2024
PyPI
crypto-regex-checker 1.6.7, 1.6.8, 1.6.9, 1.7.1, 1.7.2, 1.7.3, 1.7.4, 1.7.5
MAL-2024-11565 reversing-labs, kam193 5 IOCs

Oct 7, 2024