Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,168 npm 223,991 PyPI 12,027 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,027 reports · Feed

  • PyPI
    colarify 1.1.8
    MAL-2024-4909 reversing-labs
  • PyPI
    colargs 0.2
    MAL-2024-4908 reversing-labs
  • PyPI
    colarg 0.2, 0.1
    MAL-2024-4907 reversing-labs
  • PyPI
    colarama-api 1.0
    MAL-2024-4906 reversing-labs
  • PyPI
    colarama 1.0
    MAL-2024-4905 reversing-labs
  • PyPI
    codigosintaxis 1.0.7
    MAL-2024-4904 reversing-labs
  • PyPI
    codeui 0.0.1
    MAL-2024-4903 reversing-labs
  • PyPI
    code-helper 1.0.0
    MAL-2024-4902 reversing-labs
  • PyPI
    clowpy 0.1.0
    MAL-2024-4901 reversing-labs
  • PyPI
    cloudfix 0.0.0, 1, 1.34, 2
    MAL-2024-4900 reversing-labs
  • PyPI
    cloud-credentials 1.0.0
    MAL-2024-4899 reversing-labs
  • PyPI
    cloroma 1.0.0
    MAL-2024-4898 reversing-labs
  • PyPI
    clolorama 1.0.0
    MAL-2024-4897 reversing-labs
  • PyPI
    clistyling 2.0
    MAL-2024-4896 reversing-labs
  • PyPI
    clearsrc 6.5
    MAL-2024-4895 reversing-labs
  • PyPI
    clears 3.5, 3.44, 3.42, 0.1, 1.0, 0.0.0, 0.6, 3.444, 3.43, 3.4443
    MAL-2024-4894 reversing-labs
  • PyPI
    clearapi 0.1
    MAL-2024-4893 reversing-labs
  • PyPI
    cirtum 1.0
    MAL-2024-4892 reversing-labs
  • PyPI
    circleinfo 1.0.2, 1.0.0
    MAL-2024-4891 reversing-labs
  • PyPI
    cilorama 1.0.0
    MAL-2024-4890 reversing-labs
  • PyPI
    chromeselenium 0.1.1, 0.1.2, 0.1.0
    MAL-2024-4889 reversing-labs
  • PyPI
    checkscrapeinfo 1.0.0
    MAL-2024-4888 reversing-labs
  • PyPI
    cffy 1.15.1
    MAL-2024-4887 reversing-labs
  • PyPI
    cffii 1.15.1
    MAL-2024-4886 reversing-labs
  • PyPI
    centerprint 2.3, 2.2, 2.1
    MAL-2024-4885 reversing-labs
  • PyPI
    catbannersxd 0.0.0
    MAL-2024-4884 reversing-labs
  • PyPI
    catbannerslol 0.0.0
    MAL-2024-4883 reversing-labs
  • PyPI
    captcha-py 1.0
    MAL-2024-4882 reversing-labs
  • PyPI
    capmostercloudclinet 1.0.0
    MAL-2024-4881 reversing-labs
  • PyPI
    capmostercloudclient 1.0.0
    MAL-2024-4880 reversing-labs
  • PyPI
    capmostercloudclienet 1.0.0
    MAL-2024-4879 reversing-labs
  • PyPI
    capmostercloudclieent 1.0.0
    MAL-2024-4878 reversing-labs
  • PyPI
    capmosterclouclient 1.0.0
    MAL-2024-4877 reversing-labs
  • PyPI
    capmonsterrcloudclient 1.0.0
    MAL-2024-4876 reversing-labs
  • PyPI
    capmonstercouldclient 1.0.0
    MAL-2024-4875 reversing-labs
  • PyPI
    capmonstercoudclient 1.0.0
    MAL-2024-4874 reversing-labs
  • PyPI
    capmonstercludclient 1.0.0
    MAL-2024-4873 reversing-labs
  • PyPI
    capmonsterclouudclient 1.0.0
    MAL-2024-4872 reversing-labs
  • PyPI
    capmonsterclouidclient 1.0.0
    MAL-2024-4871 reversing-labs
  • PyPI
    capmonsterclouddlient 1.0.0
    MAL-2024-4870 reversing-labs