Skip to content

Python Package Index (PyPI)

Bad packages in Python Package Index (PyPI).

Last packages with assigned campaigns

Assignment date UTC Package Campaign Category
2026-08-30 09:34 pyservercheck GENERIC-other-risky highly_suspicious
2026-08-30 06:31 auth-app-streamlit GENERIC-standard-pypi-install-pentest probably_pentest
2026-08-30 06:20 trongridor 2025-04-tronix malicious
2026-08-29 11:29 flask-header-guard 2026-08-pygame-renderkit malicious
2026-08-29 07:28 scai-cloud-state GENERIC-local-poc spam
2026-08-29 07:27 nvdataflow GENERIC-local-poc spam
2026-08-29 07:25 dion GENERIC-local-poc spam
2026-08-28 12:11 python-stdlib-collection GENERIC-local-poc spam
2026-08-28 10:08 yamlformat-tools 2026-08-ekx-report-utils malicious
2026-08-28 10:01 yamlformatter-utils 2026-08-ekx-report-utils malicious

Newest campaigns

Creation date Name Category
2026-08-28 2026-08-pygame-renderkit malicious
2026-08-27 2026-08-ekx-report-utils malicious
2026-08-26 2026-08-pybitjs malicious
2026-08-25 2026-08-minecraft-ytreceiver malicious
2026-08-24 2026-08-multyproccess malicious
2026-08-23 2026-08-envprovision malicious
2026-08-23 2026-08-mlflow-otel-instrumentor malicious
2026-08-21 2026-08-scrambleeer malicious
2026-08-21 2026-08-boto4 malicious
2026-08-19 2026-08-libasync malicious

Statistics

Category Campaigns Packages
high_risk_hacking_tools 15 94
highly_suspicious 74 293
malicious 608 1937
pentest 1 1
probably_pentest 66 1013
spam 26 700