Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 240,458 npm 223,292 PyPI 12,017 RubyGems 4,319 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,017 reports · Feed

PyPI
proxycer 0.1.0
MAL-2026-15935 kam193, amazon-inspector 1 IOC

Sep 5, 2026
PyPI
dbt-sa-cli 0.0.1
MAL-2026-15934 kam193, amazon-inspector

Sep 5, 2026
PyPI
houdus 1.0.0, 1.0.1
MAL-2026-15933 kam193, amazon-inspector 2 IOCs

Sep 4, 2026
PyPI
chartkit-core 1.0
MAL-2026-15932 kam193

Sep 4, 2026
PyPI
metricboxlite 1.0, 2.0
MAL-2026-15931 kam193, amazon-inspector

Sep 4, 2026
PyPI
olympuslib 99.99.0
MAL-2026-15928 kam193, amazon-inspector 1 IOC

Sep 4, 2026
PyPI
pymaas 99.99.0
MAL-2026-15929 kam193, amazon-inspector 1 IOC

Sep 4, 2026
PyPI
tpu-raiden-jax 99.99.0
MAL-2026-15930 kam193, amazon-inspector 1 IOC

Sep 4, 2026
PyPI
qoeoe 0.1.0
MAL-2026-15927 kam193, amazon-inspector

Sep 4, 2026
PyPI
astlsi 0.1.0
MAL-2026-15926 kam193, amazon-inspector

Sep 4, 2026
PyPI
timeweave 1.6.0, 1.9.0, 1.7.0, 1.4.0, 1.8.0, 1.2.0, 1.1.0, 1.3.0, 1.0.0, 1.5.0
MAL-2026-15910 amazon-inspector, kam193 2 IOCs

Sep 4, 2026
PyPI
tsshare 1.0.19, 1.0.7, 1.0.5, 1.0.11, 1.0.18, 1.0.6, 1.0.14, 1.0.10, 1.0.16, 1.0.2, 1.0…
MAL-2026-16044 amazon-inspector 2 IOCs

Sep 4, 2026
PyPI
asti 0.1.0
MAL-2026-15864 kam193, amazon-inspector

Sep 3, 2026
PyPI
py-1requests 0.0.1
MAL-2026-15861 kam193, amazon-inspector

Sep 3, 2026
PyPI
py-2equests 0.0.1
MAL-2026-15862 kam193, amazon-inspector

Sep 3, 2026
PyPI
py-0requests 0.0.1
MAL-2026-15860 kam193, amazon-inspector

Sep 3, 2026
PyPI
0requests 0.0.1
MAL-2026-15859 kam193, amazon-inspector

Sep 3, 2026
PyPI
uvhttp-custom 1.7.9, 1.8.1, 1.9.9
MAL-2026-15863 kam193, amazon-inspector 1 IOC

Sep 3, 2026
PyPI
trongridi 0.0.1
MAL-2026-15858 kam193, amazon-inspector 4 IOCs

Sep 3, 2026
PyPI
company-sdk 0.0.1
MAL-2026-15827 kam193, amazon-inspector

Sep 3, 2026
PyPI
env-validator-tool 1.0.0, 1.0.1, 1.0.2
MAL-2026-15828 kam193, amazon-inspector 2 IOCs

Sep 3, 2026
PyPI
telemetry-helper 1.0.1, 2.0.0, 1.1.0, 1.0.0, 1.0.2, 1.2.0, 1.3.0, 2.0.1
MAL-2026-15829 amazon-inspector, kam193 2 IOCs

Sep 3, 2026
PyPI
syswatch 1.0.0
MAL-2026-15811 kam193, amazon-inspector 5 IOCs

Sep 1, 2026
PyPI
gcphelpit 0.1.0, 0.1.1, 0.1.2
MAL-2026-15810 kam193, amazon-inspector

Sep 1, 2026
PyPI
tallyboxlite 1.0
MAL-2026-15809 kam193

Sep 1, 2026
PyPI
pyservercheck 0.1.0, 0.1.1
MAL-2026-15603 kam193, amazon-inspector 2 IOCs

Aug 31, 2026
PyPI
tronlinker 0.0.1
MAL-2026-15588 kam193 4 IOCs

Aug 30, 2026
PyPI
auth-app-streamlit 2.1.1
MAL-2026-15577 kam193

Aug 30, 2026
PyPI
trongridor 0.0.1
MAL-2026-15578 kam193 4 IOCs

Aug 30, 2026
PyPI
flask-header-guard 1.0.0
MAL-2026-15566 kam193, amazon-inspector 1 IOC

Aug 29, 2026
PyPI
calcboxlite 1.0
MAL-2026-15488 amazon-inspector

Aug 28, 2026
PyPI
yamlformat-tools 0.1.0
MAL-2026-14589 kam193

Aug 28, 2026
PyPI
yamlformatter-utils 1.0.0
MAL-2026-14590 kam193

Aug 28, 2026
PyPI
pygame-renderkit 1.2.0
MAL-2026-14587 kam193, amazon-inspector 1 IOC

Aug 28, 2026
PyPI
yaml-report-formatter 0.1.0, 0.2.0, 0.3.0
MAL-2026-14588 kam193, amazon-inspector

Aug 28, 2026
PyPI
flyteplugins-redis 2.6.10
MAL-2026-14584 kam193

Aug 27, 2026
PyPI
flyteplugins-nsight 2.6.10
MAL-2026-14583 kam193

Aug 27, 2026
PyPI
flyteplugins-agento11y 2.6.10
MAL-2026-14581 kam193

Aug 27, 2026
PyPI
flyteplugins-echo 2.6.10
MAL-2026-14582 kam193

Aug 27, 2026
PyPI
decoris 0.3.0, 0.3.3
MAL-2026-14554 kam193 4 IOCs

Aug 27, 2026