Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

12,027 reports · Feed

  • PyPI
    libaryscraper 0.9.0
    MAL-2024-5309 reversing-labs
  • PyPI
    libari 0.3, 0.2, 0.1
    MAL-2024-5308 reversing-labs
  • PyPI
    letters-font 0.0.1
    MAL-2024-5307 reversing-labs
  • PyPI
    latencyget 0.1
    MAL-2024-5306 reversing-labs
  • PyPI
    lastweb3toolzbro 1.0
    MAL-2024-5305 reversing-labs
  • PyPI
    lalaproxy 1
    MAL-2024-5304 reversing-labs
  • PyPI
    l7 0.1
    MAL-2024-5303 reversing-labs
  • PyPI
    kynlocker 0.1.3
    MAL-2024-5302 reversing-labs
  • PyPI
    ktusvgeqiu 0.0.1
    MAL-2024-5301 reversing-labs
  • PyPI
    kjfgjsfgj12345678 0.0.1
    MAL-2024-5300 reversing-labs
  • PyPI
    kjfgjsfgj1234567 0.0.1
    MAL-2024-5299 reversing-labs
  • PyPI
    kjfgjsfgj1234 0.0.1
    MAL-2024-5298 reversing-labs
  • PyPI
    kjfgjsfgj123 0.0.1
    MAL-2024-5297 reversing-labs
  • PyPI
    kjfgjsfgj12 0.0.1
    MAL-2024-5296 reversing-labs
  • PyPI
    kjfgjsfgj1 0.0.1
    MAL-2024-5295 reversing-labs
  • PyPI
    kjfgjsfgj 0.0.1
    MAL-2024-5294 reversing-labs
  • PyPI
    killskids-auth 1.0.5, 2.0.0
    MAL-2024-5293 reversing-labs
  • PyPI
    kfactionlogger2 0.0.2
    MAL-2024-5292 reversing-labs
  • PyPI
    kfactionlogger 0.0.1, 0.0.2
    MAL-2024-5291 reversing-labs
  • PyPI
    kazer12 1, 2
    MAL-2024-5290 reversing-labs
  • PyPI
    jxzspwqwup 0.0.1
    MAL-2024-5289 reversing-labs
  • PyPI
    jxhcfdwvun 0.0.1
    MAL-2024-5288 reversing-labs
  • PyPI
    jupyter-pytest-fi-console 8.7.4, 8.7.6, 8.7.1, 8.7.0, 8.7.2, 8.7.3, 8.7.5
    MAL-2024-5287 reversing-labs
  • PyPI
    jupitercalc 0.0.5, 0.0.4
    MAL-2024-5286 reversing-labs
  • PyPI
    juk 0.1
    MAL-2024-5285 reversing-labs
  • PyPI
    judyb-advanced 0.1.0
    MAL-2024-5284 reversing-labs
  • PyPI
    jsbip39-decrypt 1.0.0
    MAL-2024-5283 reversing-labs
  • PyPI
    johnhammondontop183 1.0.0
    MAL-2024-5282 reversing-labs
  • PyPI
    johnhammondfanpackage124 1.0.0
    MAL-2024-5281 reversing-labs
  • PyPI
    jksandbox 99.0
    MAL-2024-5280 reversing-labs
  • PyPI
    jfqyotpnvb 0.0.1
    MAL-2024-5279 reversing-labs
  • PyPI
    javapatch 0.6, 0.7
    MAL-2024-5278 reversing-labs
  • PyPI
    jas9do1 7.72
    MAL-2024-5277 reversing-labs
  • PyPI
    ja3-hashscript 0.1
    MAL-2024-5276 reversing-labs
  • PyPI
    isred 4.1.1, 4.1.3, 4.1.6, 4.1.9
    MAL-2024-5275 reversing-labs
  • PyPI
    ipg 0.0
    MAL-2024-5274 reversing-labs
  • PyPI
    instarequests 0.1.5
    MAL-2024-5273 reversing-labs
  • PyPI
    instantobfosires 0.1.0
    MAL-2024-5272 reversing-labs
  • PyPI
    instantcolor 0.0.5, 0.0.3, 0.0.7, 0.0.6, 0.0.8, 0.0.2, 0.0.4
    MAL-2024-5271 reversing-labs
  • PyPI
    insanepackagev1414 1.0.0
    MAL-2024-5270 reversing-labs