Supply chain
Malicious packages · PyPI
Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.
Source: OpenSSF Malicious Packages via OSV.dev
12,027 reports · Feed
- PyPI
- PyPI
- PyPI
-
PyPI
aicreator 0.2.0, 0.1.5, 0.2.5, 0.1.6, 0.2.4, 0.2.2, 0.2.3, 0.1.8, 0.1.9, 0.1.7, 0.0.1, 0.…MAL-2024-4746 reversing-labs
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
-
PyPI
admcheck 1.0.0, 1.1.0, 1.3.0, 1.5.0, 1.2.0, 1.4.0, 0.0.9, 0.0.1, 0.0.2, 0.0.3, 0.0.4, 0.…MAL-2024-4732 reversing-labs
- PyPI
- PyPI
- PyPI
-
PyPI
90456984689490856MAL-2024-4728 reversing-labs
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI