Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,167 npm 223,990 PyPI 12,027 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,027 reports · Feed

  • PyPI
    requesuts 1.0.0
    MAL-2024-5909 reversing-labs
  • PyPI
    requesttest3 1.0.1, 1.0.2
    MAL-2024-5908 reversing-labs
  • PyPI
    requestst 2.28.2
    MAL-2024-5907 reversing-labs
  • PyPI
    requestspro 2.3, 2.4, 2.2, 2.6, 2.5
    MAL-2024-5906 reversing-labs
  • PyPI
    requestse 2.28.2
    MAL-2024-5905 reversing-labs
  • PyPI
    requestsd 2.9.2
    MAL-2024-5904 reversing-labs
  • PyPI
    requests-upgrade 0.0.1, 0.0.2
    MAL-2024-5903 reversing-labs
  • PyPI
    requests-toolbelt-v2 0.0.0, 0.0.1
    MAL-2024-5902 reversing-labs
  • PyPI
    requests-toolbelt-2 0.0.0
    MAL-2024-5901 reversing-labs
  • PyPI
    requests-sessions 0.0.1
    MAL-2024-5900 reversing-labs
  • PyPI
    requests-session 0.0.1
    MAL-2024-5899 reversing-labs
  • PyPI
    requests-latest 0.0.1
    MAL-2024-5898 reversing-labs
  • PyPI
    requests-https 0.0.1
    MAL-2024-5897 reversing-labs
  • PyPI
    requests-http 0.0.1, 0.0.2, 0.0.3
    MAL-2024-5896 reversing-labs
  • PyPI
    requestr 1.0.0
    MAL-2024-5895 reversing-labs
  • PyPI
    requestlogger 1.1.0, 1.1.1
    MAL-2024-5894 reversing-labs
  • PyPI
    requestlib 1.0.2, 1.0.0
    MAL-2024-5893 reversing-labs
  • PyPI
    requesting 0.0.1
    MAL-2024-5892 reversing-labs
  • PyPI
    requestery 1, 2
    MAL-2024-5891 reversing-labs
  • PyPI
    requesters 0.0.1
    MAL-2024-5890 reversing-labs
  • PyPI
    requestedapi 1.0
    MAL-2024-5889 reversing-labs
  • PyPI
    request91 0.0.1
    MAL-2024-5888 reversing-labs
  • PyPI
    request9 0.0.1
    MAL-2024-5887 reversing-labs
  • PyPI
    request2022 0.0.1
    MAL-2024-5886 reversing-labs
  • PyPI
    request-plus 2.31.0
    MAL-2024-5885 reversing-labs
  • PyPI
    request-http 0.0.1
    MAL-2024-5884 reversing-labs
  • PyPI
    request-get 0.0.1
    MAL-2024-5883 reversing-labs
  • PyPI
    requesrts 1.0.0
    MAL-2024-5882 reversing-labs
  • PyPI
    requesqs 1.0.0
    MAL-2024-5881 reversing-labs
  • PyPI
    requesks 1.0.0
    MAL-2024-5880 reversing-labs
  • PyPI
    requesgt 1.0.0
    MAL-2024-5879 reversing-labs
  • PyPI
    requeqsts 1.0.0
    MAL-2024-5878 reversing-labs
  • PyPI
    requekts 1.0.0
    MAL-2024-5877 reversing-labs
  • PyPI
    requeksts 1.0.0
    MAL-2024-5876 reversing-labs
  • PyPI
    requeits 1.0.0
    MAL-2024-5875 reversing-labs
  • PyPI
    requas 1.0.0
    MAL-2024-5874 reversing-labs
  • PyPI
    requ-sts 0.1.0
    MAL-2024-5873 reversing-labs
  • PyPI
    reqsests 1.0.0
    MAL-2024-5872 reversing-labs
  • PyPI
    reqquest 1.0.0
    MAL-2024-5871 reversing-labs
  • PyPI
    reqoests 1.0.0
    MAL-2024-5870 reversing-labs