Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,168 npm 223,991 PyPI 12,027 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,027 reports · Feed

  • PyPI
    xmlbuilder3 0.0.2
    MAL-2023-8309 ossf-package-analysis
  • PyPI
    nnabla-ext-cuda101-nccl2-ubuntu16 0.0.2
    MAL-2023-8308 ossf-package-analysis
  • PyPI
    narratives-from-tweets 0.1
    MAL-2023-8307 ossf-package-analysis
  • PyPI
    liblapack-dev 0.0.1
    MAL-2023-8306 ossf-package-analysis
  • PyPI
    libblas3 0.0.1
    MAL-2023-8304 ossf-package-analysis
  • PyPI
    liblapack3 0.0.2
    MAL-2023-8305 ossf-package-analysis
  • PyPI
    pyefflorer 1.0.1
    MAL-2023-8570 checkmarx, reversing-labs 17 IOCs
  • PyPI
    poc-nvk 0.1.2
    MAL-2023-8290 ossf-package-analysis
  • PyPI
    nvkvictim-poc 0.1
    MAL-2023-8289 ossf-package-analysis
  • PyPI
    pyhulul 1.0.1
    MAL-2023-8573 checkmarx, reversing-labs 17 IOCs
  • PyPI
    pyjio 1.0.1
    MAL-2023-8576 checkmarx, reversing-labs 17 IOCs
  • PyPI
    pyioler 1.0.1
    MAL-2023-8575 checkmarx, reversing-labs 17 IOCs
  • PyPI
    pytasler 1.0.1, 1.0.0
    MAL-2023-8588 checkmarx, reversing-labs 17 IOCs
  • PyPI
    pyalsogkert all versions
    MAL-2023-8568 checkmarx 17 IOCs
  • PyPI
    kokokoako all versions
    MAL-2023-8566 checkmarx 17 IOCs
  • PyPI
    pykokalalz 1.0.0
    MAL-2023-8578 checkmarx, reversing-labs 17 IOCs
  • PyPI
    pyioapso 1.0.0
    MAL-2023-8574 checkmarx, reversing-labs 17 IOCs
  • PyPI
    pyhjdddo 1.0.0
    MAL-2023-8572 checkmarx, reversing-labs 17 IOCs
  • PyPI
    pytarlooko all versions
    MAL-2023-8587 checkmarx 17 IOCs
  • PyPI
    pyktrkatoo 1.0.0
    MAL-2023-8580 checkmarx, reversing-labs 17 IOCs
  • PyPI
    pystallerer 1.0.0
    MAL-2023-8585 checkmarx, reversing-labs 17 IOCs
  • PyPI
    pykooler all versions
    MAL-2023-8579 checkmarx 17 IOCs
  • PyPI
    telethon2 all versions
    MAL-2023-8369 google-open-source-security, checkmarx 6 IOCs
  • PyPI
    pyowler 1.0.0
    MAL-2023-8583 checkmarx, reversing-labs 17 IOCs
  • PyPI
    pylioner all versions
    MAL-2023-8581 checkmarx 17 IOCs
  • PyPI
    pystob all versions
    MAL-2023-8586 checkmarx 17 IOCs
  • PyPI
    aws-consoler2 all versions
    MAL-2023-8358 google-open-source-security, checkmarx 6 IOCs
  • PyPI
    enumerate-iam all versions
    MAL-2023-8360 google-open-source-security, checkmarx 6 IOCs
  • PyPI
    aliababcloud-tea-openapi all versions
    MAL-2023-8351 google-open-source-security, checkmarx 6 IOCs
  • PyPI
    alibabacloud-vpc20180317 all versions
    MAL-2023-8354 google-open-source-security, checkmarx 6 IOCs
  • PyPI
    alibabacloud-ecs20180317 all versions
    MAL-2023-8352 google-open-source-security, checkmarx 6 IOCs
  • PyPI
    pyminor 1.0.0
    MAL-2023-8582 checkmarx, reversing-labs 17 IOCs
  • PyPI
    pyjoul 1.0.0
    MAL-2023-8577 checkmarx, reversing-labs 17 IOCs
  • PyPI
    python-aliyun-sdk-rds all versions
    MAL-2023-8367 google-open-source-security, checkmarx 6 IOCs
  • PyPI
    tencentcloud-python-sdk all versions
    MAL-2023-8371 google-open-source-security, checkmarx 6 IOCs
  • PyPI
    pyghoster 1.0.0
    MAL-2023-8571 checkmarx, reversing-labs 17 IOCs
  • PyPI
    aliyun-oss2 all versions
    MAL-2023-8356 google-open-source-security, checkmarx 6 IOCs
  • PyPI
    python-aliyun-sdk-kms all versions
    MAL-2023-8366 google-open-source-security, checkmarx 6 IOCs
  • PyPI
    syns-knox-xss-allwhere 1.0.0
    MAL-2023-1452 ossf-package-analysis
  • PyPI
    bobikssf 0.4
    MAL-2023-1448 ossf-package-analysis