Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,162 npm 223,990 PyPI 12,022 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,022 reports · Feed

PyPI
testpysecure 0.0.1, 1.1.1
MAL-2025-6600 reversing-labs, kam193

Jul 26, 2024
PyPI
shiva123456 23.99.0
MAL-2025-6584 reversing-labs, kam193

Jul 26, 2024
PyPI
sensadway 0.1, 0.2, 0.3, 0.4, 0.5
MAL-2025-6582 reversing-labs, kam193

Jul 26, 2024
PyPI
rwimodeling 10.0.2, 10.0.1
MAL-2025-6580 reversing-labs, kam193

Jul 26, 2024
PyPI
piprce 0.0.1, 0.0.2, 0.0.3, 0.0.4, 0.0.5, 0.0.6, 0.0.7, 0.0.8, 0.0.9, 0.1.0, 0.1.1, 0.…
MAL-2025-6566 reversing-labs, kam193

Jul 26, 2024
PyPI
murkh1111 1.0.99
MAL-2025-6551 reversing-labs, kam193

Jul 26, 2024
PyPI
libspatialindex 11.0.2, 10.0.2
MAL-2025-6536 reversing-labs, kam193

Jul 26, 2024
PyPI
jd-mlops 99.99.99, 0.1
MAL-2025-6528 reversing-labs, kam193

Jul 26, 2024
PyPI
is-number-object 1.0.8
MAL-2025-6526 reversing-labs, kam193

Jul 26, 2024
PyPI
interasdasdnal-data-parser 0.0.0
MAL-2025-6525 reversing-labs, kam193

Jul 26, 2024
PyPI
greensadway 0.1
MAL-2025-6519 reversing-labs, kam193

Jul 26, 2024
PyPI
graphemer 3.1.2
MAL-2025-6516 reversing-labs, kam193

Jul 26, 2024
PyPI
google-appengine-ext 0.0.1
MAL-2025-6512 reversing-labs, kam193

Jul 26, 2024
PyPI
globrex 3.1.2
MAL-2025-6511 reversing-labs, kam193

Jul 26, 2024
PyPI
elbloadmonitor 0.0.1, 0.1.12
MAL-2025-6499 reversing-labs, kam193

Jul 26, 2024
PyPI
cloudx-base 0.1.12, 1.2.0, 1.2.1
MAL-2025-6480 reversing-labs, kam193

Jul 26, 2024
PyPI
cloudx-auth 1.3.1
MAL-2025-6479 reversing-labs, kam193

Jul 26, 2024
PyPI
alksdjpureranser 3.0.0
MAL-2025-6430 reversing-labs, kam193

Jul 26, 2024
PyPI
0x000testqwe 5.20.4
MAL-2025-6428 reversing-labs, kam193

Jul 26, 2024
PyPI
saml-helper 2.3.1, 2.5.3, 2.5.4
MAL-2025-5132 reversing-labs, kam193

Jul 26, 2024
PyPI
rapyd-logger 1.4.0
MAL-2025-5125 reversing-labs, kam193

Jul 26, 2024
PyPI
gwpythonsectt2 0.1
MAL-2025-5116 reversing-labs, kam193

Jul 26, 2024
PyPI
gwpythonsectt1 0.1
MAL-2025-5115 reversing-labs, kam193

Jul 26, 2024
PyPI
c8tks94kspjyhtb 0.0.1, 0.0.2
MAL-2025-5101 reversing-labs, kam193

Jul 26, 2024
PyPI
c8tks94kspjghtb 0.0.1
MAL-2025-5100 reversing-labs, kam193

Jul 26, 2024
PyPI
c8test 0.0.1, 0.0.2, 0.0.3
MAL-2025-5099 reversing-labs, kam193

Jul 26, 2024
PyPI
atlasctf-21-prod-22 9999.0.8
MAL-2025-5097 reversing-labs, kam193

Jul 26, 2024
PyPI
packagemurder 23.99.0
MAL-2025-4700 ossf-package-analysis, kam193

Jul 26, 2024
PyPI
cugraph-service-client 23.99.0
MAL-2025-4699 ossf-package-analysis, kam193

Jul 26, 2024
PyPI
cugraph-dgl 23.99.0
MAL-2025-4698 ossf-package-analysis, kam193

Jul 26, 2024
PyPI
vfsrcetest 1.1
MAL-2025-4257 reversing-labs, kam193

Jul 26, 2024
PyPI
vfsrce18 1.0.0
MAL-2025-4256 reversing-labs, kam193

Jul 26, 2024
PyPI
rqeuets 0.0.1, 0.0.2, 0.0.3
MAL-2025-4239 reversing-labs, kam193

Jul 26, 2024
PyPI
merpe 3.2.1, 3.3.1
MAL-2025-4226 reversing-labs, kam193

Jul 26, 2024
PyPI
merbe 3.2.1, 3.1.0
MAL-2025-4225 reversing-labs, kam193

Jul 26, 2024
PyPI
mcp-xyz 0.1.0
MAL-2025-4223 reversing-labs, kam193

Jul 26, 2024
PyPI
kms-tls-sdk 0.6.1, 0.6.0, 0.6.5
MAL-2025-4222 reversing-labs, kam193

Jul 26, 2024
PyPI
discord-boteasy 0.0.1, 0.0.2
MAL-2025-4215 reversing-labs, kam193

Jul 26, 2024
PyPI
deepseek-fake 0.1.0
MAL-2025-4214 reversing-labs, kam193

Jul 26, 2024
PyPI
ctftestsowwy 0.0.9, 0.1.1, 0.1.4, 6.9, 7, 0.0.2, 0.0.1, 0.0.4, 0.0.6, 0.0.3, 0.0.8, 0.0.7, 0…
MAL-2025-4213 reversing-labs, kam193

Jul 26, 2024