Supply chain
Malicious packages · PyPI
Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.
Source: OpenSSF Malicious Packages via OSV.dev
12,027 reports · Feed
- PyPI
- PyPI
-
PyPI
oauthapimojang 0.3.4, 0.2.9, 0.3.1, 0.3.2, 0.3.6, 0.2.7, 0.2.4, 0.3.5, 0.2.8MAL-2024-5427 reversing-labs
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
-
PyPI
not-so-evil-package-spaceylad 0.0.5, 0.0.1, 0.0.7, 0.0.3, 0.0.2, 0.0.4, 0.0.6MAL-2024-5416 reversing-labs
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI