Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,162 npm 223,990 PyPI 12,022 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,022 reports · Feed

PyPI
hhonestjson 0.1.3
MAL-2024-12286 kam193

Aug 23, 2024
PyPI
hello-bozzo2 1.2.3
MAL-2024-12283 kam193

Aug 23, 2024
PyPI
hack-test 0.1.1, 0.1.0
MAL-2024-12281 kam193

Aug 23, 2024
PyPI
gltest 2.0
MAL-2024-12278 kam193

Aug 23, 2024
PyPI
get-time-zzs 0.0.4
MAL-2024-12277 kam193

Aug 23, 2024
PyPI
get-root 0.1
MAL-2024-12276 kam193

Aug 23, 2024
PyPI
expkg-am 0.0.3
MAL-2024-12268 kam193

Aug 23, 2024
PyPI
example-pypi-package-loler1 0.2.0
MAL-2024-12267 kam193

Aug 23, 2024
PyPI
easyioctl 1.2.3, 1.2.2, 1.2.0, 1.1, 1.0
MAL-2024-12260 kam193

Aug 23, 2024
PyPI
dependency00011124931 1.0.1
MAL-2024-12253 kam193

Aug 23, 2024
PyPI
chatgpt-aitools 0.1.1, 0.1.0, 0.1.2, 0.2.0
MAL-2024-12233 kam193

Aug 23, 2024
PyPI
basic-arithmetics 1.0.0
MAL-2024-12214 kam193

Aug 23, 2024
PyPI
azure-projects 0.1a0
MAL-2024-12211 kam193

Aug 23, 2024
PyPI
malware-test-pack-new 0.0.4
MAL-2024-11629 reversing-labs, kam193

Aug 23, 2024
PyPI
hellopythopyy 0.19.0, 0.21.0, 0.29.0, 0.24.0, 0.23.0
MAL-2024-11607 reversing-labs, kam193

Aug 23, 2024
PyPI
hellopythopy 0.8.0, 0.9.0, 0.11.0, 0.14.0, 0.16.0, 0.19.0, 0.2.0, 0.3.0, 0.1.0, 0.4.0, 0.5.0
MAL-2024-11606 reversing-labs, kam193

Aug 23, 2024
PyPI
confluent-docker-utils 0.0.89
MAL-2024-9963 reversing-labs, kam193

Aug 23, 2024
PyPI
anaconda-anon-usage 0.4.9
MAL-2024-9939 reversing-labs, kam193

Aug 23, 2024
PyPI
redis-di-processor 0.1.8
MAL-2024-10152 reversing-labs, kam193

Aug 23, 2024
PyPI
oz-merkle-tree 0.1.8
MAL-2024-10100 reversing-labs, kam193

Aug 23, 2024
PyPI
formatter-test-package 0.1.2, 0.1.3, 0.0.1, 0.0.2, 0.1.0, 0.1.4, 0.1.7, 0.1.8, 0.1.9, 0.1.10, 0.1.11
MAL-2024-10029 reversing-labs, kam193

Aug 23, 2024
PyPI
unrartest 0.0.1
MAL-2024-10181 reversing-labs, kam193 1 IOC

Aug 23, 2024
PyPI
pyunzip 0.0.1, 0.0.2, 0.0.4
MAL-2024-10148 reversing-labs, kam193 1 IOC

Aug 23, 2024
PyPI
bananaholder 0.0.110
MAL-2024-12213 kam193

Aug 22, 2024
PyPI
byted-tbs 0.1.0
MAL-2024-9957 reversing-labs, kam193 1 IOC

Aug 22, 2024
PyPI
ttat-api-test 0.1.0, 0.2.0
MAL-2024-12367 kam193 1 IOC

Aug 22, 2024
PyPI
ttat-api 1.0.5
MAL-2024-12366 kam193 1 IOC

Aug 22, 2024
PyPI
tiktok-session-lite-sdk 1.8.5, 2.8.5, 0.8.6, 2.8.6, 1.8.6
MAL-2024-12364 kam193 1 IOC

Aug 22, 2024
PyPI
subsys-counter 0.8.5
MAL-2024-12353 kam193 1 IOC

Aug 22, 2024
PyPI
kmvn-ekjvnbwkhjbewv 0.2.3, 0.2.5
MAL-2024-12298 kam193 1 IOC

Aug 22, 2024
PyPI
byterec-models 1.5.3
MAL-2024-12223 kam193 1 IOC

Aug 22, 2024
PyPI
byted-rtc-robot-api-v2 0.0.43.15, 0.0.43.16, 0.0.43.17, 0.0.44.15, 0.0.44.16
MAL-2024-12222 kam193 1 IOC

Aug 22, 2024
PyPI
audit-themis-i18n 2.3.5
MAL-2024-12210 kam193 1 IOC

Aug 22, 2024
PyPI
threading-assistant 0.1
MAL-2024-12363 kam193

Aug 19, 2024
PyPI
thethreadingassistant 0.1
MAL-2024-12362 kam193

Aug 19, 2024
PyPI
assisting-threading 0.1
MAL-2024-12209 kam193

Aug 19, 2024
PyPI
assistant-threader 0.1
MAL-2024-12208 kam193

Aug 19, 2024
PyPI
aiotrans 1.0.0rc1, 1.0.0rc2, 1, 1.1, 1.2, 1.0.0
MAL-2024-9938 reversing-labs, kam193 6 IOCs

Aug 14, 2024
PyPI
uconst 1.0.0rc1, 1.0.0, 1.0.1, 1.0.2
MAL-2024-10179 reversing-labs, kam193 6 IOCs

Aug 14, 2024
PyPI
audio-separator-fork 0.8.10, 0.8.11, 0.8.1, 0.8.0, 0.8.2, 0.8.3, 0.8.4, 0.8.6, 0.8.7, 0.8.8, 0.8.9
MAL-2024-9947 reversing-labs, kam193 4 IOCs

Aug 11, 2024