Supply chain
Malicious packages · PyPI
Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.
Source: OpenSSF Malicious Packages via OSV.dev
12,027 reports · Feed
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
-
PyPI
pymaniac 6.0, 7.0, 8.0, 0.1, 0.9, 0.7, 4.0, 0.4, 3.0, 9.1, 0.5, 2.0, 5.0, 9.0, 0.6, 0.2,…MAL-2024-5743 reversing-labs
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
-
PyPI
pyiopenssl 20.0.7, 20.0.9, 20.0.12, 20.0.5, 20.0.8, 20.0.11, 20.0.6, 20.0.10MAL-2024-5726 reversing-labs
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI