Supply chain
Malicious packages · PyPI
Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.
Source: OpenSSF Malicious Packages via OSV.dev
12,027 reports · Feed
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
-
PyPI
multiconnection 2.34.21, 2.34.18, 2.34.14, 2.34.19, 2.34.13, 2.34.20, 2.34.22, 2.34.16, 2.34.17MAL-2024-5383 reversing-labs
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
-
PyPI
mlp-data-product-producer 999.9.19, 999.9.20, 999.9.18, 999.9.17, 999.9.13, 999.9.15, 999.9.16MAL-2024-5371 reversing-labs
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
-
PyPI
manyhttps 2.33.12, 2.33.1, 2.33.9, 2.33.13, 2.33.10, 2.33.11, 2.33.7, 2.33.8MAL-2024-5350 reversing-labs