Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,162 npm 223,990 PyPI 12,022 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,022 reports · Feed

PyPI
crypto-format-checking 1.7.5, 1.7.6
MAL-2024-11564 reversing-labs, kam193 5 IOCs

Oct 7, 2024
PyPI
agent-user-generate 1.6.7
MAL-2024-11517 reversing-labs, kam193 5 IOCs

Oct 7, 2024
PyPI
ptsecurity 7.0.6
MAL-2024-9270 kam193 5 IOCs

Oct 7, 2024
PyPI
posi 7.0.6
MAL-2024-9269 kam193 5 IOCs

Oct 7, 2024
PyPI
maxpatrol 7.0.6
MAL-2024-9268 kam193 5 IOCs

Oct 7, 2024
PyPI
innostage-group 7.0.6, 7.0.4
MAL-2024-9267 kam193 5 IOCs

Oct 7, 2024
PyPI
innostage 7.0.7, 7.0.3, 7.0.1, 7.0.2, 7.0.4, 7.0.6
MAL-2024-9266 kam193 5 IOCs

Oct 7, 2024
PyPI
cyberart 7.0.6
MAL-2024-9265 kam193 5 IOCs

Oct 7, 2024
PyPI
instaread 0.1.3, 0.1.2, 0.1.1, 0.1.0
MAL-2024-12292 kam193

Oct 6, 2024
PyPI
upllib 1, 1.0
MAL-2024-11736 reversing-labs, kam193 3 IOCs

Oct 3, 2024
PyPI
pyutiltool 3.5
MAL-2024-11686 reversing-labs, kam193 3 IOCs

Oct 3, 2024
PyPI
exflibrary 1, 1.1, 1.11, 1.0
MAL-2024-11584 reversing-labs, kam193 3 IOCs

Oct 3, 2024
PyPI
dlibex 1.11, 1.12
MAL-2024-11579 reversing-labs, kam193 3 IOCs

Oct 3, 2024
PyPI
vizplotlib 1.0.3
MAL-2024-11745 reversing-labs, kam193 1 IOC

Oct 3, 2024
PyPI
viplotlib 1.0.0, 1.0.1
MAL-2024-11744 reversing-labs, kam193 1 IOC

Oct 3, 2024
PyPI
alfooou 1.0.0, 1.0.1, 1.0.2, 1.0.4
MAL-2024-11522 reversing-labs, kam193 1 IOC

Oct 3, 2024
PyPI
spy-ai 1.0, 1.1, 0.1, 1.1.0, 1.0.0, 0.1.3, 1.0.1, 1.1.3, 1.1.1
MAL-2024-12351 kam193 1 IOC

Oct 2, 2024
PyPI
spiderai 1.0, 1.1, 0.0.2, 0.0.1, 0.0.3, 0.1.0
MAL-2024-12348 kam193 1 IOC

Oct 2, 2024
PyPI
spiderxr-ai 0.1.5, 0.4, 0.5
MAL-2024-11713 reversing-labs, kam193 1 IOC

Oct 2, 2024
PyPI
spider-ai 0.1, 0.2, 0.3, 1.1, 1.0, 0.4
MAL-2024-11712 reversing-labs, kam193 1 IOC

Oct 2, 2024
PyPI
osint-tool 0.1, 0.2, 0.5, 0.4
MAL-2024-12320 kam193 1 IOC

Oct 2, 2024
PyPI
discord-token-lib 0.1
MAL-2024-12257 kam193 1 IOC

Oct 2, 2024
PyPI
titan-osint 0.1, 0.2
MAL-2024-11728 reversing-labs, kam193 1 IOC

Oct 2, 2024
PyPI
website-scanner 1.0.0
MAL-2024-9067 ossf-package-analysis, kam193 1 IOC

Oct 1, 2024
PyPI
google-play-store 0.6.0
MAL-2024-12280 kam193 2 IOCs

Oct 1, 2024
PyPI
pyprettifier 0.1.0, 0.1.1, 0.1.2, 0.1.3, 0.1.4, 0.1.5
MAL-2024-11674 reversing-labs, kam193

Sep 29, 2024
PyPI
colotama 0.4.4, 0.4.5, 0.4.7, 0.4.8, 0.4.9, 0.5.0, 0.4.6
MAL-2024-11560 reversing-labs, ossf-package-analysis, kam193

Sep 29, 2024
PyPI
cryptograohy 0.5.6, 0.5.7, 0.5.8, 0.5.9, 0.6.0, 0.6.1, 0.6.2, 0.6.3, 0.6.4, 0.6.7, 0.7.0, 0.…
MAL-2024-11568 reversing-labs, ossf-package-analysis, kam193

Sep 28, 2024
PyPI
bitforger 0, 0.1.0, 1.1.2, 1.1.3, 2.3.4, 2.3.5, 5.1, 5.1.4, 6.1.2, 8.1, 0.0
MAL-2024-11536 reversing-labs, kam193 2 IOCs

Sep 28, 2024
PyPI
bibit 8.1.4, 8.1.5, 8.1.9
MAL-2024-11535 reversing-labs, kam193 2 IOCs

Sep 28, 2024
PyPI
saywh11222 0.0.1
MAL-2024-9022 ossf-package-analysis

Sep 28, 2024
PyPI
saywh222 0.0.1
MAL-2024-9005 ossf-package-analysis

Sep 27, 2024
PyPI
saywhu 0.0.1
MAL-2024-9002 ossf-package-analysis

Sep 27, 2024
PyPI
sunrequests 0.0.1
MAL-2024-11716 reversing-labs, kam193

Sep 26, 2024
PyPI
faest 0.14.6
MAL-2024-12269 kam193 3 IOCs

Sep 25, 2024
PyPI
botnetv2 0.1
MAL-2024-11539 reversing-labs, kam193

Sep 24, 2024
PyPI
evil-select-pkg 0.0.2, 0.0.1
MAL-2024-12266 kam193 2 IOCs

Sep 24, 2024
PyPI
mennort 0.1.0
MAL-2024-12305 kam193

Sep 23, 2024
PyPI
rcebymrx 0.0.1
MAL-2024-8946 ossf-package-analysis, kam193

Sep 23, 2024
PyPI
easypydb 0.4.4
MAL-2024-12261 kam193 1 IOC

Sep 21, 2024