Supply chain
Malicious packages · PyPI
Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.
Source: OpenSSF Malicious Packages via OSV.dev
12,027 reports · Feed
- PyPI
- PyPI
-
PyPI
forecolor5 0.1.5, 0.0.3, 0.1.0, 0.0.1, 0.0.9, 0.1.1, 0.0.6, 0.0.2, 0.0.4MAL-2024-5147 reversing-labs
- PyPI
- PyPI
- PyPI
-
PyPI
flaks-setup 0.93, 0.95, 0.1, 0.9, 0.7, 0.94, 1.1, 0.3, 1.0, 0.5, 0.91, 0.92, 0.6, 0.2, 1.2,…MAL-2024-5143 reversing-labs
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI