Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,162 npm 223,990 PyPI 12,022 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,022 reports · Feed

PyPI
akh-py 0.0.1
MAL-2024-11520 reversing-labs, kam193

Jul 26, 2024
PyPI
aiopbotocore 0.1, 0.1.0, 0.3, 0.6.0, 0.9.0, 0.2.0, 0.4.0
MAL-2024-11519 reversing-labs, kam193

Jul 26, 2024
PyPI
some-random-package-33 2.3.100
MAL-2024-10895 ossf-package-analysis, kam193

Jul 26, 2024
PyPI
nvidia-clara-sim 999, 0.0.0a0
MAL-2024-10315 ossf-package-analysis, kam193

Jul 26, 2024
PyPI
debug-toolbar 0.0.1
MAL-2024-10239 ossf-package-analysis, kam193

Jul 26, 2024
PyPI
123bla 0.0.1
MAL-2024-10238 ossf-package-analysis, kam193

Jul 26, 2024
PyPI
blab111 0.0.1
MAL-2024-10236 ossf-package-analysis, kam193

Jul 26, 2024
PyPI
this-is-poc-fortesting-dontinstall-12345 0.0.1, 0.0.3
MAL-2024-10174 reversing-labs, kam193

Jul 26, 2024
PyPI
manojmacpy 1.1.1, 1.1.2, 1.1.3, 1.1.4, 1.1.5, 1.1.6, 1.1.7, 1.1.8
MAL-2024-10040 reversing-labs, kam193

Jul 26, 2024
PyPI
graphcore-cloud-tools 1.0.0
MAL-2024-10032 reversing-labs, kam193

Jul 26, 2024
PyPI
evil-package 0.0.3, 0.0.1, 0.0.2
MAL-2024-10023 reversing-labs, kam193

Jul 24, 2024
PyPI
pybanners 0.0.1, 0.0.2, 0.0.3, 0.0.4
MAL-2024-10112 reversing-labs, kam193 2 IOCs

Jul 24, 2024
PyPI
popeye-xyz 1.0.4
MAL-2024-10106 reversing-labs, kam193

Jul 22, 2024
PyPI
popeye-pip-v3 1.0.4
MAL-2024-10105 reversing-labs, kam193

Jul 22, 2024
PyPI
hexteamibm 1.0.4
MAL-2024-12285 kam193 1 IOC

Jul 21, 2024
PyPI
asptcer 1.0.0
MAL-2024-12207 kam193 1 IOC

Jul 21, 2024
PyPI
gentorqkkh1 0.1, 0.2
MAL-2024-10031 reversing-labs, kam193

Jul 21, 2024
PyPI
gentorqkkh 0.1
MAL-2024-10030 reversing-labs, kam193

Jul 21, 2024
PyPI
testjsonn2 0.1
MAL-2024-7840 ossf-package-analysis, kam193

Jul 21, 2024
PyPI
testjson3 0.1
MAL-2024-7838 ossf-package-analysis, kam193

Jul 21, 2024
PyPI
testjsonn1 0.6, 0.7, 0.1, 0.2, 0.3, 0.4
MAL-2024-7839 ossf-package-analysis, kam193

Jul 21, 2024
PyPI
fasdghjkhjafsd 0.0.1, 0.0.2, 0.0.3
MAL-2024-12271 kam193

Jul 11, 2024
PyPI
openai-py3 1.35.10
MAL-2024-12319 kam193

Jul 9, 2024
PyPI
hugchats 0.4.9
MAL-2024-12289 kam193

Jul 9, 2024
PyPI
deepseek-api 0.5.3.1, 0.5.3
MAL-2024-12251 kam193

Jul 9, 2024
PyPI
pystlete 2.9
MAL-2024-10125 reversing-labs, kam193

Jul 9, 2024
PyPI
transformars 4.42.3.post1, 4.42.3.post2, 4.42.3, 4.42.3.post4
MAL-2024-12365 kam193

Jul 7, 2024
PyPI
better-gradient 0.1.0, 0.2.0, 0.3.0
MAL-2024-9949 reversing-labs, kam193

Jul 6, 2024
PyPI
whoisbuild 1.0.1, 1.0.2
MAL-2024-12370 kam193

Jul 6, 2024
PyPI
discord-embedbuilder 2.5.4, 2.5.5, 2.5.3, 2.5.6
MAL-2024-12256 kam193

Jul 6, 2024
PyPI
incaperror 7.0.0
MAL-2025-41690 reversing-labs, kam193

Jul 5, 2024
PyPI
spl-types 1.0.4, 1.0.5, 1.0.7, 1.0.8
MAL-2024-12349 kam193

Jul 3, 2024
PyPI
sol-instruct 1.0.4
MAL-2024-12347 kam193

Jul 3, 2024
PyPI
raydium-sdk 2.1.2, 2.1.3
MAL-2024-12337 kam193

Jul 3, 2024
PyPI
raydium 2.1.4, 2.1.1, 2.1.5, 2.1.6
MAL-2024-12336 kam193

Jul 3, 2024
PyPI
sol-structs 1.0.2, 1.0.3
MAL-2024-10161 reversing-labs, kam193

Jul 3, 2024
PyPI
python-guild 1.0.1
MAL-2024-10133 reversing-labs, kam193

Jul 3, 2024
PyPI
text-adventure-game 0.1.1, 0.1.2, 0.1.3, 0.1.0
MAL-2024-10172 reversing-labs, kam193

Jul 1, 2024
PyPI
zlibxjson 8.1, 8.2
MAL-2024-10220 reversing-labs, kam193

Jun 29, 2024
PyPI
etheriuum 1.0.0
MAL-2024-9999 reversing-labs, kam193

Jun 28, 2024