Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,162 npm 223,990 PyPI 12,022 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,022 reports · Feed

  • PyPI
    torhc 0.1
    MAL-2024-11732 reversing-labs, kam193 1 IOC
  • PyPI
    setuptolos 0.1
    MAL-2024-11705 reversing-labs, kam193 1 IOC
  • PyPI
    seabonr 0.1
    MAL-2024-11701 reversing-labs, kam193 1 IOC
  • PyPI
    kersa 0.1
    MAL-2024-11621 reversing-labs, kam193 1 IOC
  • PyPI
    botoceor 0.1
    MAL-2024-11540 reversing-labs, kam193 1 IOC
  • PyPI
    bo3to 0.1
    MAL-2024-11538 reversing-labs, kam193 1 IOC
  • PyPI
    asciidrawing 0.1.1, 0.1.2
    MAL-2024-9944 reversing-labs, ossf-package-analysis, kam193
  • PyPI
    pdf2doc 0.3.9
    MAL-2024-11657 reversing-labs, kam193 1 IOC
  • PyPI
    sendtowev 0.3, 0.4, 0.2, 0.1
    MAL-2024-11704 reversing-labs, kam193 4 IOCs
  • PyPI
    package-lib8127 0.1
    MAL-2024-11653 reversing-labs, kam193 4 IOCs
  • PyPI
    discself 1.0.0
    MAL-2024-12258 kam193 1 IOC
  • PyPI
    discord-api 1.0.1
    MAL-2024-12255 kam193 1 IOC
  • PyPI
    request-wizard 1.0.0
    MAL-2025-3464 reversing-labs, kam193 3 IOCs
  • PyPI
    hyperreq 0.1
    MAL-2024-10035 reversing-labs, kam193 3 IOCs
  • PyPI
    colorbytes 1.0.0, 1.0.1
    MAL-2024-9962 reversing-labs, kam193 5 IOCs
  • PyPI
    colourfulls 1.0.0
    MAL-2024-12246 kam193 1 IOC
  • PyPI
    coffin2022 7.0
    MAL-2024-12245 kam193
  • PyPI
    coffin-grave 7.0
    MAL-2024-12244 kam193
  • PyPI
    coffin-codes-pro 7.0
    MAL-2024-12243 kam193
  • PyPI
    coffin-codes-net2 7.0
    MAL-2024-12242 kam193
  • PyPI
    coffin-codes-net 7.0
    MAL-2024-12241 kam193
  • PyPI
    coffin-codes-2022 7.2
    MAL-2024-12240 kam193
  • PyPI
    cobo-python 0.1
    MAL-2024-12239 kam193 1 IOC
  • PyPI
    cobo-custdy 0.1
    MAL-2024-12238 kam193 1 IOC
  • PyPI
    cobo-custdoy 0.1
    MAL-2024-12237 kam193 1 IOC
  • PyPI
    dirutils 1, 1.0
    MAL-2024-9967 reversing-labs, kam193 2 IOCs
  • PyPI
    browser-cookies3 1.1
    MAL-2024-9952 reversing-labs, kam193 2 IOCs
  • PyPI
    browser-cookies1 1.1
    MAL-2024-9951 reversing-labs, kam193 2 IOCs
  • PyPI
    gmacpyutil 9999.0.0
    MAL-2025-929 reversing-labs, kam193
  • PyPI
    glob-to-regexp 2.1.1
    MAL-2025-6510 reversing-labs, kam193
  • PyPI
    babel-preset-current-node-syntax 2.1.1
    MAL-2025-6460 reversing-labs, kam193
  • PyPI
    ateslassia 3.0.0
    MAL-2025-6436 reversing-labs, kam193
  • PyPI
    youreallydontwantthispackage2132 1.0.3
    MAL-2025-5239 ossf-package-analysis, kam193
  • PyPI
    proto-google-cloud-dlp-v2beta1 0.15.99
    MAL-2025-4666 ossf-package-analysis, reversing-labs, kam193
  • PyPI
    grpc-google-bigtable-v2 0.11.99
    MAL-2025-4665 ossf-package-analysis, reversing-labs, kam193
  • PyPI
    whalebone7-poc 0.0.4
    MAL-2025-3018 reversing-labs, kam193
  • PyPI
    flag-leak-r 0.1.0
    MAL-2024-9446 ossf-package-analysis, kam193
  • PyPI
    test-packages2 0.1, 0.1.1
    MAL-2024-12360 kam193
  • PyPI
    test-packages1 0.1, 0.1.1
    MAL-2024-12359 kam193
  • PyPI
    pwnstar-lib 1.5, 1.6, 1.7, 1.8, 1.9, 2.0, 2.1, 2.3, 2.4
    MAL-2024-12329 kam193