Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

12,027 reports · Feed

  • PyPI
    mygens 1.0, 1.1
    MAL-2024-5389 reversing-labs
  • PyPI
    myethertoolz 1.0
    MAL-2024-5388 reversing-labs
  • PyPI
    multiplerequests 2.31.3, 2.31.0, 2.31.2, 2.31.5, 2.31.4, 2.31.1
    MAL-2024-5387 reversing-labs
  • PyPI
    multihttps 2.31.12, 2.32.4, 2.32.5, 2.32.1, 2.32.3
    MAL-2024-5386 reversing-labs
  • PyPI
    multihttp 2.31.10, 2.31.11
    MAL-2024-5385 reversing-labs
  • PyPI
    multiconnects 2.34.7, 2.34.8, 2.34.11, 2.34.9, 2.34.10
    MAL-2024-5384 reversing-labs
  • PyPI
    multiconnection 2.34.21, 2.34.18, 2.34.14, 2.34.19, 2.34.13, 2.34.20, 2.34.22, 2.34.16, 2.34.17
    MAL-2024-5383 reversing-labs
  • PyPI
    multiconnect 2.34.2, 2.34.5, 2.33.19, 2.34.3, 2.34.4, 2.33.18
    MAL-2024-5382 reversing-labs
  • PyPI
    mult-flow 1.0.1, 1.0.2, 1.0.1.1, 1.0.0
    MAL-2024-5381 reversing-labs
  • PyPI
    muktesittaban 0.0.16, 0.0.13
    MAL-2024-5380 reversing-labs
  • PyPI
    mrfeastpip 0.7, 0.4, 0.3, 0.5, 0.6, 0.1, 0.2
    MAL-2024-5379 reversing-labs
  • PyPI
    movers 1.2
    MAL-2024-5378 reversing-labs
  • PyPI
    mousemovement 0.0.0
    MAL-2024-5377 reversing-labs
  • PyPI
    morecolor 5
    MAL-2024-5376 reversing-labs
  • PyPI
    monkeyui 0.0.1
    MAL-2024-5375 reversing-labs
  • PyPI
    modulelibraryv1 0.0.1
    MAL-2024-5374 reversing-labs
  • PyPI
    modelize 1
    MAL-2024-5373 reversing-labs
  • PyPI
    mnemonic-to-address 1.2.8, 1.2.7, 1.0.0
    MAL-2024-5372 reversing-labs
  • PyPI
    mlp-data-product-producer 999.9.19, 999.9.20, 999.9.18, 999.9.17, 999.9.13, 999.9.15, 999.9.16
    MAL-2024-5371 reversing-labs
  • PyPI
    mirtos 1.0
    MAL-2024-5370 reversing-labs
  • PyPI
    minis-sdk 99.0
    MAL-2024-5369 reversing-labs
  • PyPI
    minecraftskyblockapi 0.2.3, 0.2.2
    MAL-2024-5368 reversing-labs
  • PyPI
    minecraft-utilities-api 0.4.1, 0.3.6, 0.4.2, 0.3.9
    MAL-2024-5367 reversing-labs
  • PyPI
    milleday 1
    MAL-2024-5366 reversing-labs
  • PyPI
    microsoftoauth 1.0.0
    MAL-2024-5365 reversing-labs
  • PyPI
    microsoft-helper 1.0
    MAL-2024-5364 reversing-labs
  • PyPI
    microauth2 1.0.0
    MAL-2024-5363 reversing-labs
  • PyPI
    microauth 1.0.0
    MAL-2024-5362 reversing-labs
  • PyPI
    metrok 1.0.0
    MAL-2024-5361 reversing-labs
  • PyPI
    methantiafkxd 0.0.2, 0.0.3, 0.0.1, 0.0.6
    MAL-2024-5360 reversing-labs
  • PyPI
    mestin 1.0
    MAL-2024-5359 reversing-labs
  • PyPI
    message-serializer 1.0.1
    MAL-2024-5358 reversing-labs
  • PyPI
    me-dheeraj-moye-moye 1.0.5, 1.0.4, 1.0.6, 1.0.2, 1.0.3
    MAL-2024-5357 reversing-labs, kam193
  • PyPI
    mdkjrkjelz 0.0.1
    MAL-2024-5356 reversing-labs
  • PyPI
    mchypixel 1.0.1, 1.0.2, 1.0.3
    MAL-2024-5355 reversing-labs
  • PyPI
    mayalbl 5, 4
    MAL-2024-5354 reversing-labs
  • PyPI
    massdm 0.0.8, 0.0.1, 0.0.2
    MAL-2024-5353 reversing-labs
  • PyPI
    massconnect 2.35.18
    MAL-2024-5352 reversing-labs
  • PyPI
    mashetz 1.0
    MAL-2024-5351 reversing-labs
  • PyPI
    manyhttps 2.33.12, 2.33.1, 2.33.9, 2.33.13, 2.33.10, 2.33.11, 2.33.7, 2.33.8
    MAL-2024-5350 reversing-labs