Supply chain
Malicious packages · PyPI
Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.
Source: OpenSSF Malicious Packages via OSV.dev
12,027 reports · Feed
- PyPI
- PyPI
-
PyPI
sentinelone 1.0.0, 1.2.1, 1.1.8, 1.0.3, 1.1.7, 1.0.5, 1.1.0, 1.0.2, 1.1.4, 1.0.8, 1.1.3, 1.…MAL-2024-5987 reversing-labs
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
-
PyPI
schubismomv3 1.8.0, 1.10.0, 1.7.0, 1.9.0, 1.6.0, 1.3.0, 1.5.0, 1.2.0, 1.4.0MAL-2024-5967 reversing-labs
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI