Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,167 npm 223,990 PyPI 12,027 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,027 reports · Feed

  • PyPI
    manyhttp 2.33.15, 2.33.16, 2.33.14, 2.33.17, 2.33.18
    MAL-2024-5349 reversing-labs
  • PyPI
    mangasee123 0.0.1, 0.0.2
    MAL-2024-5348 reversing-labs
  • PyPI
    malod 1.0
    MAL-2024-5347 reversing-labs
  • PyPI
    mallodys 1.0
    MAL-2024-5346 reversing-labs
  • PyPI
    mallody 1.0
    MAL-2024-5345 reversing-labs
  • PyPI
    mall0d 1.0
    MAL-2024-5344 reversing-labs
  • PyPI
    malicious-pip-package-for-democdf 0.1.0
    MAL-2024-5343 reversing-labs
  • PyPI
    maiter 1.0
    MAL-2024-5342 reversing-labs
  • PyPI
    lyfamdorksgb 0.3.2
    MAL-2024-5341 reversing-labs
  • PyPI
    lulumortreux 0.1.3, 0.1.4
    MAL-2024-5340 reversing-labs
  • PyPI
    lukz 2.0.1, 2.0.0, 3.0.0
    MAL-2024-5339 reversing-labs
  • PyPI
    lucifertest2 0.1
    MAL-2024-5338 reversing-labs
  • PyPI
    lucifer9423 0.2
    MAL-2024-5337 reversing-labs
  • PyPI
    lucifer5033 0.2
    MAL-2024-5336 reversing-labs
  • PyPI
    lucifer-example-0 0.0.0, 0.2, 0.1
    MAL-2024-5335 reversing-labs
  • PyPI
    lubyrequests 1.0.0
    MAL-2024-5334 reversing-labs
  • PyPI
    lsbs 0.0.11, 0.0.1, 0.0.12
    MAL-2024-5333 reversing-labs
  • PyPI
    lowmovers 1.2
    MAL-2024-5332 reversing-labs
  • PyPI
    loganx 0.2.0, 0.1.0
    MAL-2024-5331 reversing-labs
  • PyPI
    lofter 1.0
    MAL-2024-5330 reversing-labs
  • PyPI
    lindze 0.1
    MAL-2024-5329 reversing-labs
  • PyPI
    ligitkidss 1.0
    MAL-2024-5328 reversing-labs
  • PyPI
    ligitgays 1.0
    MAL-2024-5327 reversing-labs
  • PyPI
    libsocks5 1.7.4, 1.7.0, 1.1.1, 1.7.3, 1.7.2, 1.7.1
    MAL-2024-5326 reversing-labs, kam193
  • PyPI
    libsock 1.1.3, 1.1.0
    MAL-2024-5325 reversing-labs, kam193
  • PyPI
    libraryscraper 0.0.8
    MAL-2024-5324 reversing-labs
  • PyPI
    libproxy 1.1.5, 1.1.4
    MAL-2024-5323 reversing-labs, kam193
  • PyPI
    libpeshnx 0.1
    MAL-2024-5322 reversing-labs
  • PyPI
    libpesh 0.1
    MAL-2024-5321 reversing-labs
  • PyPI
    libiobi 0.1
    MAL-2024-5320 reversing-labs
  • PyPI
    libig 0.1
    MAL-2024-5319 reversing-labs
  • PyPI
    libidrequest 0.4
    MAL-2024-5318 reversing-labs
  • PyPI
    libidos 0.1
    MAL-2024-5317 reversing-labs
  • PyPI
    libidi 0.1
    MAL-2024-5316 reversing-labs
  • PyPI
    libideeee 0.1
    MAL-2024-5315 reversing-labs
  • PyPI
    libideee 0.1
    MAL-2024-5314 reversing-labs
  • PyPI
    libidee 0.1
    MAL-2024-5313 reversing-labs
  • PyPI
    libida 0.2
    MAL-2024-5312 reversing-labs
  • PyPI
    libid 0.1
    MAL-2024-5311 reversing-labs
  • PyPI
    libcrypt 1.2.0, 1.0.0
    MAL-2024-5310 reversing-labs