Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,168 npm 223,991 PyPI 12,027 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,027 reports · Feed

  • PyPI
    httpssus 0.0.2
    MAL-2024-5229 reversing-labs
  • PyPI
    httpssp 0.0.0
    MAL-2024-5228 reversing-labs
  • PyPI
    httpsrequestsfast 1.3, 1.2, 1.1
    MAL-2024-5227 reversing-labs
  • PyPI
    httpsreqfast 1.6, 1.7, 1.0, 1.3, 1.5, 1.2, 1.1, 1.4
    MAL-2024-5226 reversing-labs
  • PyPI
    httpsp 6.9
    MAL-2024-5225 reversing-labs
  • PyPI
    httpsos 0.35
    MAL-2024-5224 reversing-labs
  • PyPI
    httpsing 0.35
    MAL-2024-5223 reversing-labs
  • PyPI
    httpscolor 1.0
    MAL-2024-5222 reversing-labs
  • PyPI
    httprequesthub 2.31.3, 2.31.1, 2.31.0, 2.31.4
    MAL-2024-5221 reversing-labs, kam193
  • PyPI
    httpniggerblackcocksontopfr 4.4.6
    MAL-2024-5220 reversing-labs
  • PyPI
    httplat 1.0
    MAL-2024-5219 reversing-labs
  • PyPI
    httpgayasfuniggahajewm 4.4.5, 4.4.7
    MAL-2024-5218 reversing-labs
  • PyPI
    httpgayasfunigga 4.4.9
    MAL-2024-5217 reversing-labs
  • PyPI
    httpacc 0.0.1
    MAL-2024-5216 reversing-labs
  • PyPI
    http3clientpy 1.0.24
    MAL-2024-5215 reversing-labs
  • PyPI
    http3client 1.0.23
    MAL-2024-5214 reversing-labs
  • PyPI
    http3-client 1.0.19, 1.0.20, 1.0.17, 1.0.21, 1.0.18, 1.0.0.1, 1.0.7
    MAL-2024-5213 reversing-labs
  • PyPI
    http-xen 1.0.1, 1.0.0
    MAL-2024-5212 reversing-labs
  • PyPI
    http-request-query 0.0.2, 0.0.3
    MAL-2024-5211 reversing-labs
  • PyPI
    httops 1.0.2
    MAL-2024-5210 reversing-labs
  • PyPI
    httiop 0.0.1
    MAL-2024-5209 reversing-labs
  • PyPI
    htties 0.1
    MAL-2024-5208 reversing-labs
  • PyPI
    htps1 0.2.3, 2.3.1
    MAL-2024-5207 reversing-labs
  • PyPI
    hsbcgui 0.0.10, 0.0.9, 0.0.13, 0.0.6, 0.0.8, 0.0.12, 0.0.7
    MAL-2024-5206 reversing-labs
  • PyPI
    hoes 0.0.1, 0.0.2, 0.0.3
    MAL-2024-5205 reversing-labs
  • PyPI
    hnuhfyzumkmo 0.3.2
    MAL-2024-5204 reversing-labs
  • PyPI
    hlokty 0.1
    MAL-2024-5203 reversing-labs, kam193
  • PyPI
    hexcolured 1.0
    MAL-2024-5202 reversing-labs
  • PyPI
    helrmerter 1.0.0
    MAL-2024-5201 reversing-labs
  • PyPI
    helmerter 1.0.0
    MAL-2024-5200 reversing-labs
  • PyPI
    hazard 1
    MAL-2024-5199 reversing-labs
  • PyPI
    hashdecrypts 1.0
    MAL-2024-5198 reversing-labs
  • PyPI
    hashdecrypt 1.0.1, 1.0.2, 1.0.0
    MAL-2024-5197 reversing-labs
  • PyPI
    hase 0.0.1
    MAL-2024-5196 reversing-labs
  • PyPI
    hamburgesr 1.0.0
    MAL-2024-5195 reversing-labs
  • PyPI
    habbocls 0.1.0
    MAL-2024-5194 reversing-labs
  • PyPI
    habboapps 0.1.0
    MAL-2024-5193 reversing-labs
  • PyPI
    habboapp 0.1.0
    MAL-2024-5192 reversing-labs
  • PyPI
    habboapis 0.1.0
    MAL-2024-5191 reversing-labs
  • PyPI
    guypy 0.1.0
    MAL-2024-5190 reversing-labs