Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,168 npm 223,991 PyPI 12,027 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,027 reports · Feed

  • PyPI
    discord-simple-api-py 1.3.0
    MAL-2024-5069 reversing-labs
  • PyPI
    discord-scrapper 1.0
    MAL-2024-5068 reversing-labs
  • PyPI
    discord-py-v13 1.3
    MAL-2024-5067 reversing-labs
  • PyPI
    discord-misc 0.2.46, 0.2.43, 0.2.44, 0.5.46, 0.2.47
    MAL-2024-5066 reversing-labs
  • PyPI
    discord-manager 1.0
    MAL-2024-5065 reversing-labs
  • PyPI
    discord-install-helper 0.0.13, 0.0.14
    MAL-2024-5064 reversing-labs
  • PyPI
    discord-gift 1.0
    MAL-2024-5063 reversing-labs
  • PyPI
    discord-ghost 0.0.1
    MAL-2024-5062 reversing-labs
  • PyPI
    discord-dev 3.0, 2.9, 2.8
    MAL-2024-5061 reversing-labs
  • PyPI
    discord-commands 0.0.8, 0.0.1
    MAL-2024-5060 reversing-labs
  • PyPI
    discord-color 1.2
    MAL-2024-5059 reversing-labs
  • PyPI
    discord-client 1.5.3
    MAL-2024-5058 reversing-labs
  • PyPI
    discord-boost 1.0
    MAL-2024-5057 reversing-labs
  • PyPI
    discord-anarchy 0.0.1
    MAL-2024-5056 reversing-labs
  • PyPI
    discord-anarch 0.0.1
    MAL-2024-5055 reversing-labs
  • PyPI
    discord-addon 1.5.3
    MAL-2024-5054 reversing-labs
  • PyPI
    discolorpy 0.0.1
    MAL-2024-5053 reversing-labs
  • PyPI
    discmusic 0.0.1, 0.0.2, 0.1.2, 0.1.1
    MAL-2024-5052 reversing-labs
  • PyPI
    directui 0.0.1
    MAL-2024-5051 reversing-labs
  • PyPI
    dider 1.0
    MAL-2024-5050 reversing-labs
  • PyPI
    dicuser 0.0.5, 0.0.1, 0.0.3, 0.0.2, 0.0.4
    MAL-2024-5049 reversing-labs
  • PyPI
    dhawnz 1.0
    MAL-2024-5048 reversing-labs
  • PyPI
    dhamaka 0.0.1
    MAL-2024-5047 reversing-labs
  • PyPI
    dfdfdfdfhhh 1.0.3, 1.0.0, 1.0.1, 1.0.2
    MAL-2024-5046 reversing-labs
  • PyPI
    devide04 1
    MAL-2024-5045 reversing-labs
  • PyPI
    devicespoofer 2.0, 2.2
    MAL-2024-5044 reversing-labs
  • PyPI
    devicespoof 2.0
    MAL-2024-5043 reversing-labs
  • PyPI
    dero-pip 1.0.1, 1.0.0
    MAL-2024-5042 reversing-labs
  • PyPI
    dependency-confusion123 1.0.4
    MAL-2024-5041 reversing-labs
  • PyPI
    dependency-confusion12 1.0.4
    MAL-2024-5040 reversing-labs
  • PyPI
    dependency-confusion111 9.9.9
    MAL-2024-5039 reversing-labs
  • PyPI
    demontonto1 1.0.8
    MAL-2024-5038 reversing-labs
  • PyPI
    demontonto 1.0.8
    MAL-2024-5037 reversing-labs
  • PyPI
    demo-malicious-package 2022.12.7
    MAL-2024-5036 reversing-labs
  • PyPI
    dekugay 1.0
    MAL-2024-5035 reversing-labs
  • PyPI
    dcreq 0.0.0
    MAL-2024-5034 reversing-labs
  • PyPI
    dccsx 0.0.1, 0.0.2, 0.0.3, 0.0.4
    MAL-2024-5033 reversing-labs
  • PyPI
    datagraph 0.9.0
    MAL-2024-5032 reversing-labs
  • PyPI
    data-platform-observability-validation 999.9.20
    MAL-2024-5031 reversing-labs
  • PyPI
    data-platform-observability-core 999.9.20
    MAL-2024-5030 reversing-labs