Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,164 npm 223,990 PyPI 12,024 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,024 reports · Feed

  • PyPI
    etherreum 1.0.0
    MAL-2024-10001 reversing-labs, kam193
  • PyPI
    etherreeum 1.0.0
    MAL-2024-10000 reversing-labs, kam193
  • PyPI
    zyqnuutupjerllnbxaeq 0.0.1
    MAL-2024-6264 reversing-labs
  • PyPI
    zydnitro 1.0
    MAL-2024-6263 reversing-labs
  • PyPI
    ztasimb 1.0.0
    MAL-2024-6262 reversing-labs
  • PyPI
    zproxy2 1.0
    MAL-2024-6261 reversing-labs
  • PyPI
    zproxy 1.0
    MAL-2024-6260 reversing-labs
  • PyPI
    zorosnitro 1.0
    MAL-2024-6259 reversing-labs
  • PyPI
    znomig 1.0.0
    MAL-2024-6258 reversing-labs
  • PyPI
    zhpt1cscoe 0.0.1
    MAL-2024-6257 reversing-labs
  • PyPI
    zeubilamouche 0.1.4
    MAL-2024-6256 reversing-labs
  • PyPI
    zelixnitro 1.0
    MAL-2024-6255 reversing-labs
  • PyPI
    zefkopzekfo 0.0.1
    MAL-2024-6254 reversing-labs
  • PyPI
    zatta 1
    MAL-2024-6253 reversing-labs
  • PyPI
    zafira 0.1
    MAL-2024-6252 reversing-labs
  • PyPI
    youtubebot 0.1.1, 0.1.0
    MAL-2024-6251 reversing-labs
  • PyPI
    yellyproxies 1.0
    MAL-2024-6250 reversing-labs
  • PyPI
    yellorq 1.0
    MAL-2024-6249 reversing-labs
  • PyPI
    xoloxwmellxliq 0.0.0
    MAL-2024-6248 reversing-labs
  • PyPI
    xolowqffntthtb 0.0.0
    MAL-2024-6247 reversing-labs
  • PyPI
    xolovqryjphftd 0.0.0
    MAL-2024-6246 reversing-labs
  • PyPI
    xoloulfkhiyywc 0.0.0
    MAL-2024-6245 reversing-labs
  • PyPI
    xolotcgstfiguu 0.0.0
    MAL-2024-6244 reversing-labs
  • PyPI
    xolosxelwsesnp 0.0.0
    MAL-2024-6243 reversing-labs
  • PyPI
    xolosamsdyhcfa 0.0.0
    MAL-2024-6242 reversing-labs
  • PyPI
    xolosafhpodvqo 0.0.0
    MAL-2024-6241 reversing-labs
  • PyPI
    xoloqmotdjpbic 0.0.0
    MAL-2024-6240 reversing-labs
  • PyPI
    xolomjqalvrpmp 0.0.0
    MAL-2024-6239 reversing-labs
  • PyPI
    xololcuakbzbuu 0.0.0
    MAL-2024-6238 reversing-labs
  • PyPI
    xolojhzyppbsow 0.0.0
    MAL-2024-6237 reversing-labs
  • PyPI
    xolojgmnizxche 0.0.0
    MAL-2024-6236 reversing-labs
  • PyPI
    xolojbxzzttwpk 0.0.0
    MAL-2024-6235 reversing-labs
  • PyPI
    xologrekjlqzxj 0.0.0
    MAL-2024-6234 reversing-labs
  • PyPI
    xoloftiqwxxhje 0.0.0
    MAL-2024-6233 reversing-labs
  • PyPI
    xolofmdvxqvbmp 0.0.0
    MAL-2024-6232 reversing-labs
  • PyPI
    xoloeduccelifz 0.0.0
    MAL-2024-6231 reversing-labs
  • PyPI
    xolodyntlnewtp 0.0.0
    MAL-2024-6230 reversing-labs
  • PyPI
    xolobzvfburelm 0.0.0
    MAL-2024-6229 reversing-labs
  • PyPI
    xolobwritbrulv 0.0.0
    MAL-2024-6228 reversing-labs
  • PyPI
    xolobbbccc 1.0
    MAL-2024-6227 reversing-labs