Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,162 npm 223,990 PyPI 12,022 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,022 reports · Feed

PyPI
pyloy 0.0.1
MAL-2024-10119 reversing-labs, kam193 9 IOCs

Sep 4, 2024
PyPI
pyadd 0.1.0, 0.1.1, 0.1.2, 0.1.3, 0.1.4
MAL-2024-10111 reversing-labs, kam193 9 IOCs

Sep 4, 2024
PyPI
modeflow 0.0.1, 0.0.2, 0.1.0
MAL-2024-10047 reversing-labs, kam193 9 IOCs

Sep 4, 2024
PyPI
ezauto 0.0.1
MAL-2024-10027 reversing-labs, kam193 9 IOCs

Sep 4, 2024
PyPI
pojang-resorter 0.1, 0.2, 0.3, 0.4, 1.2, 1.6.2, 1.22, 1.25, 1.92, 1.97, 1.926, 1.9626, 2.3, 2.4…
MAL-2024-11660 reversing-labs, kam193

Sep 2, 2024
PyPI
calculator-c08d6d50f5964131 1000.0.2
MAL-2024-12229 kam193

Aug 30, 2024
PyPI
crustyhttp 1.3.5
MAL-2024-9264 kam193 2 IOCs

Aug 29, 2024
PyPI
httpsmovements 1.3.5
MAL-2024-11609 reversing-labs, kam193 2 IOCs

Aug 29, 2024
PyPI
asyncmodules 2.3.5
MAL-2024-11533 reversing-labs, kam193 2 IOCs

Aug 29, 2024
PyPI
assulthimars 1.3.5
MAL-2024-11532 reversing-labs, kam193 2 IOCs

Aug 29, 2024
PyPI
assaulthimars 1.3.5
MAL-2024-11531 reversing-labs, kam193 2 IOCs

Aug 29, 2024
PyPI
utilhttp 2.3.5
MAL-2024-10184 reversing-labs, kam193 2 IOCs

Aug 29, 2024
PyPI
modernreqs 2.3.5
MAL-2024-10048 reversing-labs, kam193 2 IOCs

Aug 29, 2024
PyPI
flophttp 2.3.5
MAL-2024-10028 reversing-labs, kam193 2 IOCs

Aug 29, 2024
PyPI
invokehttp 2.5.5, 2.5.3
MAL-2024-8726 reversing-labs, kam193 2 IOCs

Aug 29, 2024
PyPI
c2 0.1.7, 0.1.6, 0.1.5, 0.1.4, 0.1.3, 0.1.2, 0.1.1, 0.1.0
MAL-2024-12224 kam193 2 IOCs

Aug 27, 2024
PyPI
bitcommit 0.1.7
MAL-2024-12219 kam193 2 IOCs

Aug 27, 2024
PyPI
swapoc 0.0.1, 0.0.2, 0.0.3, 0.0.4, 0.0.5, 0.0.6, 0.0.7, 0.0.8, 0.0.9, 1.0.1, 1.0.0, 2.…
MAL-2025-989 reversing-labs, kam193

Aug 23, 2024
PyPI
requestss3 3.3.3.3
MAL-2025-972 reversing-labs, kam193

Aug 23, 2024
PyPI
requestss2 3.3.3.3
MAL-2025-971 reversing-labs, kam193

Aug 23, 2024
PyPI
requests1 3.3.3.3
MAL-2025-970 reversing-labs, kam193

Aug 23, 2024
PyPI
pytc123 3.1.0
MAL-2025-959 reversing-labs, kam193

Aug 23, 2024
PyPI
hackmiami 69.69.69
MAL-2025-5117 reversing-labs, kam193

Aug 23, 2024
PyPI
soultracker 0.1.0
MAL-2025-3565 ossf-package-analysis, kam193

Aug 23, 2024
PyPI
package-346234293 1.0.1
MAL-2025-3453 reversing-labs, kam193

Aug 23, 2024
PyPI
package-name-here 0.0.1, 0.0.2
MAL-2025-2984 reversing-labs, kam193

Aug 23, 2024
PyPI
evil-pkg2 0.2, 0.3
MAL-2025-2961 reversing-labs, kam193

Aug 23, 2024
PyPI
evil-pkg1 0.2
MAL-2025-2960 reversing-labs, kam193

Aug 23, 2024
PyPI
evil-pkg 0.1
MAL-2025-2959 reversing-labs, kam193

Aug 23, 2024
PyPI
ninjainjtest1337 0.1.5, 0.1.6, 0.1.4, 0.1.1, 0.1.0, 0.1.3
MAL-2025-1514 ossf-package-analysis, kam193

Aug 23, 2024
PyPI
wehaveatogether 0.1.0, 0.1.2, 0.1.1, 0.1.6, 0.1.7, 0.1.9
MAL-2024-12369 kam193

Aug 23, 2024
PyPI
test-tool-devdevrl-hackerone 1.0.0
MAL-2024-12361 kam193

Aug 23, 2024
PyPI
shiva-rao23 1.0.0
MAL-2024-12344 kam193

Aug 23, 2024
PyPI
python-project-wntliogu 0.1.0
MAL-2024-12334 kam193

Aug 23, 2024
PyPI
popeye-shyam-love 1.0.15
MAL-2024-12327 kam193

Aug 23, 2024
PyPI
pitest117 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.5, 1.0.4, 1.0.6, 1.0.7, 1.0.9, 1.0.8, 1.1.1, 1.…
MAL-2024-12326 kam193

Aug 23, 2024
PyPI
pitest115 1.0.0
MAL-2024-12325 kam193

Aug 23, 2024
PyPI
lobomarinopython 1.0.0
MAL-2024-12300 kam193

Aug 23, 2024
PyPI
ibmodules 0.1.2, 0.1.1, 0.1.0
MAL-2024-12290 kam193, reversing-labs

Aug 23, 2024
PyPI
honestjson 0.1.3
MAL-2024-12288 kam193

Aug 23, 2024