Supply chain
Malicious packages · PyPI
Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.
Source: OpenSSF Malicious Packages via OSV.dev
12,027 reports · Feed
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
-
PyPI
glovo-data-platform-declarative-airflow 999.9.19, 999.9.20, 999.9.18, 999.9.17, 999.9.13, 999.9.14MAL-2024-5182 reversing-labs
-
PyPI
glovo-data-platform-declarative 999.9.19, 999.9.20, 999.9.18, 999.9.17, 999.9.13, 999.9.15MAL-2024-5181 reversing-labs
- PyPI
-
PyPI
getwebshare 3.0.5, 3.0.4, 1.0.0, 3.0.9, 3.0.8, 3.0.6, 3.0.3, 3.1.0, 3.0.1, 3.0.0MAL-2024-5179 reversing-labs
-
PyPI
getproxywebshare 3.1.8, 3.1.9, 3.2.2, 3.1.5, 3.2.6, 3.1.4, 3.1.7, 3.1.6, 3.2.5, 3.1.2, 3.2.1, 3.…MAL-2024-5178 reversing-labs
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI