diff --git a/osv/malicious/pypi/ok-script/MAL-0000-okscript.json b/osv/malicious/pypi/ok-script/MAL-0000-okscript.json
new file mode 100644
index 00000000000..71bf41c79b2
--- /dev/null
+++ b/osv/malicious/pypi/ok-script/MAL-0000-okscript.json
@@ -0,0 +1,33 @@
+{
+  "modified": "2025-03-28T14:19:12.788Z",
+  "published": "2025-03-28T14:19:12.788Z",
+  "schema_version": "1.5.0",
+  "summary": "Malicious code in ok-script package (pypi)",
+  "details": "This package ok-script contains obfuscated code, dangerous auto-update mechanism running downloaded code as new processes and empty source code without any relation to the packaged binaries",
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "PyPI",
+        "name": "ok-script",
+        "purl": "pkg:pypi/ok-script"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  "credits": [
+    {
+      "name": "Safedep",
+      "type": "FINDER",
+      "contact": ["https://safedep.io/"]
+    }
+  ]
+}