Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,168 npm 223,991 PyPI 12,027 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,027 reports · Feed

  • PyPI
    data-platform-importer-brain 999.9.20
    MAL-2024-5029 reversing-labs
  • PyPI
    data-platform-dbt 999.9.20
    MAL-2024-5028 reversing-labs
  • PyPI
    data-platform-airflow-recipes 999.9.20
    MAL-2024-5027 reversing-labs
  • PyPI
    data-platform-airflow-operators 999.9.20
    MAL-2024-5026 reversing-labs
  • PyPI
    darkmanontop 0.0.1
    MAL-2024-5025 reversing-labs
  • PyPI
    cxcxcx 9.9.9
    MAL-2024-5024 reversing-labs
  • PyPI
    custvomtkinter 1.0.0
    MAL-2024-5023 reversing-labs
  • PyPI
    custrmtkinter 1.0.0
    MAL-2024-5022 reversing-labs
  • PyPI
    customtkintet 1.0.0
    MAL-2024-5021 reversing-labs
  • PyPI
    customtinter 1.0.0
    MAL-2024-5020 reversing-labs
  • PyPI
    customtikinter 1.0.0
    MAL-2024-5019 reversing-labs
  • PyPI
    customekinter 1.0.0
    MAL-2024-5018 reversing-labs
  • PyPI
    custm 1.0.0
    MAL-2024-5017 reversing-labs
  • PyPI
    cusromtkinter 1.0.0
    MAL-2024-5016 reversing-labs
  • PyPI
    cusgtomtkinter 1.0.0
    MAL-2024-5015 reversing-labs
  • PyPI
    cuolur 0.0.1
    MAL-2024-5014 reversing-labs
  • PyPI
    cuolor 0.0.1
    MAL-2024-5013 reversing-labs
  • PyPI
    culturestreak 1.0, 1.1
    MAL-2024-5012 reversing-labs
  • PyPI
    cuatomtkinter 1.0.0
    MAL-2024-5011 reversing-labs
  • PyPI
    ctyps 1
    MAL-2024-5010 reversing-labs
  • PyPI
    cstmotkinter 1.0.0
    MAL-2024-5009 reversing-labs
  • PyPI
    cstlsy 0.1.0
    MAL-2024-5008 reversing-labs
  • PyPI
    cryztalnitro 1.0
    MAL-2024-5007 reversing-labs
  • PyPI
    crystalnitro 1.0
    MAL-2024-5006 reversing-labs
  • PyPI
    cryptoutilities 1.0.0
    MAL-2024-5005 reversing-labs
  • PyPI
    cryptolibs 1.2.0, 1.0.0
    MAL-2024-5004 reversing-labs
  • PyPI
    cryptographylibs 2.0.0, 1.0.0
    MAL-2024-5003 reversing-labs
  • PyPI
    cryptographylibary 2.0.0, 1.0.0
    MAL-2024-5002 reversing-labs
  • PyPI
    cryptographylib 1.2.0, 1.0.0
    MAL-2024-5001 reversing-labs
  • PyPI
    credential-sdk 0.0.2, 0.0.1, 0.0.3
    MAL-2024-5000 reversing-labs
  • PyPI
    cra-template-snap 99.0
    MAL-2024-4999 reversing-labs
  • PyPI
    coulor 0.0.1, 0.0.2, 0.0.3
    MAL-2024-4998 reversing-labs
  • PyPI
    corutil 0.7, 0.6, 0.8, 0.9, 0.32, 0.33, 0.34, 0.35, 0.36, 0.37
    MAL-2024-4997 reversing-labs
  • PyPI
    corlorama 1.0.0
    MAL-2024-4996 reversing-labs
  • PyPI
    cordipy 1
    MAL-2024-4995 reversing-labs
  • PyPI
    coolstyle 1.0
    MAL-2024-4994 reversing-labs
  • PyPI
    cookiesjar 0.0.1
    MAL-2024-4993 reversing-labs
  • PyPI
    console-logs 1.0.1, 1.0.2, 1.0.0
    MAL-2024-4992 reversing-labs
  • PyPI
    conio 0.0.1, 0.0.2, 0.0.4, 0.0.3
    MAL-2024-4991 reversing-labs
  • PyPI
    compilecls 1.0.0, 1.0.5, 1.0.4, 1.0.6, 1.0.2, 1.0.3
    MAL-2024-4990 reversing-labs