Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,162 npm 223,990 PyPI 12,022 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,022 reports · Feed

PyPI
jupiterhelper 0.1.1, 0.1.2, 0.1.3, 0.1.5
MAL-2024-10038 reversing-labs, kam193 4 IOCs

Aug 10, 2024
PyPI
jupiter-helper 0.1
MAL-2024-10037 reversing-labs, kam193 4 IOCs

Aug 10, 2024
PyPI
aiohttp-libscss 0.23.0, 0.23.1, 0.23.2, 0.24.0, 0.25.0, 0.26.0
MAL-2024-9937 reversing-labs, kam193 1 IOC

Aug 10, 2024
PyPI
ethercheck 1.1.1, 1.1.2
MAL-2024-12264 kam193

Aug 9, 2024
PyPI
pyfetcher-vaaai 1.7.2
MAL-2024-10116 reversing-labs, kam193 3 IOCs

Aug 7, 2024
PyPI
pyfetcher 1.7.2, 1.7.3, 1.7.4, 1.7.5
MAL-2024-10115 reversing-labs, kam193 3 IOCs

Aug 7, 2024
PyPI
netfetcher 1.7.5
MAL-2024-10049 reversing-labs, kam193 3 IOCs

Aug 7, 2024
PyPI
gandon-pidar1 1.0.0
MAL-2025-928 reversing-labs, kam193 1 IOC

Aug 5, 2024
PyPI
whel 1.0.0
MAL-2025-5144 reversing-labs, kam193 1 IOC

Aug 5, 2024
PyPI
whee11 1.0.0
MAL-2025-5143 reversing-labs, kam193 1 IOC

Aug 5, 2024
PyPI
s3ffs 1.0.0
MAL-2025-5131 reversing-labs, kam193 1 IOC

Aug 5, 2024
PyPI
fsspecc 1.0.0
MAL-2025-5114 reversing-labs, kam193 1 IOC

Aug 5, 2024
PyPI
crypt0graphyy 1.0.0
MAL-2025-5108 reversing-labs, kam193 1 IOC

Aug 5, 2024
PyPI
paquete-5 1.0.0
MAL-2024-12321 kam193 1 IOC

Aug 5, 2024
PyPI
advdef01 1.0.0
MAL-2024-12189 kam193 1 IOC

Aug 5, 2024
PyPI
mecit3 1.0.0
MAL-2024-10044 reversing-labs, kam193 1 IOC

Aug 5, 2024
PyPI
mecit2 1.0.0
MAL-2024-10043 reversing-labs, kam193 1 IOC

Aug 5, 2024
PyPI
mecit1 1.0.0
MAL-2024-10042 reversing-labs, kam193 1 IOC

Aug 5, 2024
PyPI
reqests-2 2.32.3
MAL-2024-10154 reversing-labs, kam193

Aug 5, 2024
PyPI
strongkong 0.0.1
MAL-2024-10168 reversing-labs, kam193 2 IOCs

Jul 29, 2024
PyPI
kongstrong 0.0.1
MAL-2024-10039 reversing-labs, kam193 2 IOCs

Jul 29, 2024
PyPI
solgpt 0.1, 0.2, 0.3
MAL-2024-10166 reversing-labs, kam193 1 IOC

Jul 29, 2024
PyPI
soali 8.0.5
MAL-2024-12346 kam193

Jul 28, 2024
PyPI
soal 8.0.5
MAL-2024-12345 kam193

Jul 28, 2024
PyPI
ebell 0.1
MAL-2024-12263 kam193

Jul 28, 2024
PyPI
ebe 8.0.5
MAL-2024-12262 kam193

Jul 28, 2024
PyPI
a-oder 8.0.0
MAL-2024-12186 kam193

Jul 28, 2024
PyPI
qassabi 1.1.8
MAL-2025-964 reversing-labs, kam193

Jul 26, 2024
PyPI
private-test-4 1.0.1
MAL-2025-955 reversing-labs, kam193

Jul 26, 2024
PyPI
private-test-2 1.0.0
MAL-2025-954 reversing-labs, kam193

Jul 26, 2024
PyPI
private-test-1 1.0.0
MAL-2025-953 reversing-labs, kam193

Jul 26, 2024
PyPI
mkdsli 3.0.0, 4.0.0, 5.0.0, 6.0.0, 7.0.0
MAL-2025-945 reversing-labs, kam193

Jul 26, 2024
PyPI
masirkhan 0.1.9
MAL-2025-944 reversing-labs, kam193

Jul 26, 2024
PyPI
jamasp 1.0.1.dev0
MAL-2025-937 reversing-labs, kam193

Jul 26, 2024
PyPI
goftvagoo 0.1.1
MAL-2025-930 reversing-labs, kam193

Jul 26, 2024
PyPI
dexat2 2
MAL-2025-918 reversing-labs, kam193

Jul 26, 2024
PyPI
dependency908 1.0.0
MAL-2025-915 reversing-labs, kam193

Jul 26, 2024
PyPI
dependency133434fr43437 1.0.0
MAL-2025-914 reversing-labs, kam193

Jul 26, 2024
PyPI
confirmedbywaseem 1.0.0
MAL-2025-911 reversing-labs, kam193

Jul 26, 2024
PyPI
your-module-name 1.0.0, 0.1
MAL-2025-6622 reversing-labs, kam193

Jul 26, 2024