Supply chain
Malicious packages · PyPI
Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.
Source: OpenSSF Malicious Packages via OSV.dev
12,022 reports · Feed
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
-
PyPI
opengrep 0.0.1, 0.0.2, 0.0.3, 0.0.4, 0.0.5, 0.0.6, 0.0.7, 0.0.8MAL-2025-2981 reversing-labs, kam193
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
-
PyPI
testresearchpackagedc 0.1.6, 0.1.0, 0.1.2, 0.1.3, 0.1.4, 0.1.5MAL-2025-1512 ossf-package-analysis, kam193
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
-
PyPI
puffioner131 99999999, 999999991, 9999, 99999, 999999, 9999999, 999999999MAL-2024-8025 ossf-package-analysis, kam193