Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

12,022 reports · Feed

  • PyPI
    chosenrce18 1.0.0
    MAL-2025-4210 reversing-labs, kam193
  • PyPI
    littelbitx0 1.1.0
    MAL-2025-42 ossf-package-analysis, kam193
  • PyPI
    rtxt-dep4 3.3.7
    MAL-2025-41756 reversing-labs, kam193
  • PyPI
    rtxt-dep3 3.3.7
    MAL-2025-41755 reversing-labs, kam193
  • PyPI
    c8tsdk 0.0.1
    MAL-2025-3863 ossf-package-analysis, kam193
  • PyPI
    hello-wordl 0.2.0
    MAL-2025-3600 ossf-package-analysis, kam193
  • PyPI
    rtpoc1 0.2, 0.1
    MAL-2025-36 ossf-package-analysis, kam193
  • PyPI
    story-mcp-hub 9999.0.0
    MAL-2025-3471 reversing-labs, kam193
  • PyPI
    requests-rapidl 1.0.0, 1.1.0
    MAL-2025-3466 reversing-labs, kam193
  • PyPI
    requests-rapid 1.0.0
    MAL-2025-3465 reversing-labs, kam193
  • PyPI
    pydiolag6688 99.9.9
    MAL-2025-3458 reversing-labs, kam193
  • PyPI
    mytonctrl 9999.0.0
    MAL-2025-3452 reversing-labs, kam193
  • PyPI
    multiutils 0.1.3, 0.0.1, 0.1.0, 0.1.1, 0.1.2
    MAL-2025-3451 reversing-labs, kam193
  • PyPI
    subdomainer 1.0.0
    MAL-2025-3278 ossf-package-analysis, kam193
  • PyPI
    quizdom 0.1.0, 0.3.0, 0.2.0
    MAL-2025-3208 ossf-package-analysis, kam193
  • PyPI
    szn-search-mlops-serp-downloader 0.1.16
    MAL-2025-3005 reversing-labs, kam193
  • PyPI
    python-dateutil-malicious 2.5.4
    MAL-2025-2992 reversing-labs, kam193
  • PyPI
    otc-metadata 0.0.2, 0.0.3, 0.0.1
    MAL-2025-2983 reversing-labs, kam193
  • PyPI
    opengrep 0.0.1, 0.0.2, 0.0.3, 0.0.4, 0.0.5, 0.0.6, 0.0.7, 0.0.8
    MAL-2025-2981 reversing-labs, kam193
  • PyPI
    nifty-cli 100.0.0
    MAL-2025-2979 reversing-labs, kam193
  • PyPI
    canvas-crawler 0.1
    MAL-2025-2943 reversing-labs, kam193
  • PyPI
    wasig4321 1.0.0
    MAL-2025-2011 reversing-labs, kam193
  • PyPI
    waseem4321 1.0.0
    MAL-2025-2010 reversing-labs, kam193
  • PyPI
    w7-poc 0.1
    MAL-2025-2009 reversing-labs, kam193
  • PyPI
    testospkg 0.0.2, 0.0.3, 0.0.1
    MAL-2025-1997 reversing-labs, kam193
  • PyPI
    googleapis-googleapis-grpc-python 1.9.3
    MAL-2025-1976 reversing-labs, kam193
  • PyPI
    example-vizsla-tutorial 0.1.0, 0.1.1
    MAL-2025-1973 reversing-labs, kam193
  • PyPI
    deepseekai 0.0.8
    MAL-2025-1971 reversing-labs, kam193
  • PyPI
    deepseeek 0.0.8
    MAL-2025-1970 reversing-labs, kam193
  • PyPI
    d5e54ncy1337 1.0.0
    MAL-2025-1969 reversing-labs, kam193
  • PyPI
    d5e54nc32y1337 1.0.0
    MAL-2025-1968 reversing-labs, kam193
  • PyPI
    akatest 0.2, 0.3, 0.4
    MAL-2025-1961 reversing-labs, kam193
  • PyPI
    testresearchpackagedc 0.1.6, 0.1.0, 0.1.2, 0.1.3, 0.1.4, 0.1.5
    MAL-2025-1512 ossf-package-analysis, kam193
  • PyPI
    pyqubee 12.1.1, 11.35.1
    MAL-2025-128 ossf-package-analysis, kam193
  • PyPI
    wr-test 100.1337, 101.1337
    MAL-2025-1008 reversing-labs, kam193
  • PyPI
    wasi8787878 1.0.0
    MAL-2025-1004 reversing-labs, kam193
  • PyPI
    w722-poc 0.1
    MAL-2025-1003 reversing-labs, kam193
  • PyPI
    appetize-cli 1.0.0
    MAL-2024-9941 reversing-labs, kam193
  • PyPI
    adafruit-imageload 1.0.0
    MAL-2024-9935 reversing-labs, kam193
  • PyPI
    puffioner131 99999999, 999999991, 9999, 99999, 999999, 9999999, 999999999
    MAL-2024-8025 ossf-package-analysis, kam193