Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,168 npm 223,991 PyPI 12,027 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,027 reports · Feed

PyPI
python-cos-sdk-v5 all versions
MAL-2023-8368 google-open-source-security, checkmarx 6 IOCs

Aug 11, 2023
PyPI
python-aliyun-sdk-core all versions
MAL-2023-8364 google-open-source-security, checkmarx 6 IOCs

Aug 11, 2023
PyPI
notsogood 0.0.2
MAL-2023-1435 ossf-package-analysis

Aug 10, 2023
PyPI
python-aliyun-sdk-ecs all versions
MAL-2023-8365 google-open-source-security, checkmarx 6 IOCs

Aug 10, 2023
PyPI
pypiele 1.0.1, 1.0.2
MAL-2023-8584 checkmarx, reversing-labs 17 IOCs

Jul 30, 2023
PyPI
barcodegeneratorqr 1.0.3
MAL-2023-1354 ossf-package-analysis

Jul 12, 2023
PyPI
servantcord 1.0.2
MAL-2023-1407 ossf-package-analysis

Jul 7, 2023
PyPI
pyjwtrequest 1.0.4
MAL-2023-1392 ossf-package-analysis

Jul 1, 2023
PyPI
barcodeqrgen 1.0.3
MAL-2023-1355 ossf-package-analysis

Jun 21, 2023
PyPI
arangodba all versions
MAL-2023-8357 google-open-source-security, checkmarx 6 IOCs

Jun 19, 2023
PyPI
dependency1338 1.0.0
MAL-2023-1361 ossf-package-analysis

Jun 18, 2023
PyPI
bytedtrace 0.1.2, 0.1.6, 0.1.8, 0.1.0, 0.1.5, 0.1.1, 0.1.4, 0.1.9, 0.1.3
MAL-2023-1359 ossf-package-analysis

Jun 6, 2023
PyPI
lalalaopti all versions
MAL-2023-8567 checkmarx 17 IOCs

Jun 6, 2023
PyPI
gogogolokl all versions
MAL-2023-8565 checkmarx 17 IOCs

Jun 6, 2023
PyPI
nagogypython 11.13.8
MAL-2023-1380 ossf-package-analysis

Jun 3, 2023
PyPI
numpy-req 12.17.3
MAL-2023-1381 ossf-package-analysis

Jun 3, 2023
PyPI
cxfreezepy all versions
MAL-2023-2692 checkmarx 2 IOCs

May 29, 2023
PyPI
pyclack 1.0.0
MAL-2023-8569 checkmarx, reversing-labs 17 IOCs

May 27, 2023
PyPI
oculoushide all versions
MAL-2023-4800 checkmarx 2 IOCs

May 25, 2023
PyPI
this-is-malware 0.1.0
MAL-2023-1420 ossf-package-analysis

May 25, 2023
PyPI
opencv-keras 17.10.13
MAL-2023-1383 ossf-package-analysis

May 20, 2023
PyPI
sqlalchemy-os 14.0.10
MAL-2023-1414 ossf-package-analysis

May 20, 2023
PyPI
req-flask 2.9.4
MAL-2023-1399 ossf-package-analysis

May 20, 2023
PyPI
os-numpy 3.19.4
MAL-2023-1384 ossf-package-analysis

May 20, 2023
PyPI
pylint-py 15.0.3
MAL-2023-1394 ossf-package-analysis

May 20, 2023
PyPI
pylint-beautifulsoup 3.12.3
MAL-2023-1393 ossf-package-analysis

May 20, 2023
PyPI
sqlalchemy-requests 7.1.1
MAL-2023-1415 ossf-package-analysis

May 20, 2023
PyPI
matplotlib-req 17.6.16
MAL-2023-1377 ossf-package-analysis

May 20, 2023
PyPI
pygame-install 17.14.20
MAL-2023-1389 ossf-package-analysis

May 20, 2023
PyPI
beautifulsoup-numpy 10.13.10
MAL-2023-1356 ossf-package-analysis

May 20, 2023
PyPI
selenium-matplotlib 17.9.4
MAL-2023-1406 ossf-package-analysis

May 20, 2023
PyPI
numpy-selenium 5.20.19
MAL-2023-1382 ossf-package-analysis

May 20, 2023
PyPI
pygame-pytorch 3.4.19
MAL-2023-1391 ossf-package-analysis

May 20, 2023
PyPI
pytorch-pandas 14.19.3
MAL-2023-1396 ossf-package-analysis

May 20, 2023
PyPI
pandas-numpy 8.19.3
MAL-2023-1385 ossf-package-analysis

May 20, 2023
PyPI
matplotlib-sqlalchemy 16.18.4
MAL-2023-1379 ossf-package-analysis

May 20, 2023
PyPI
crypto-pygame 10.14.7
MAL-2023-1360 ossf-package-analysis

May 20, 2023
PyPI
print-pip 13.9.3
MAL-2023-1388 ossf-package-analysis

May 20, 2023
PyPI
install-pyyaml 1.19.12
MAL-2023-1372 ossf-package-analysis

May 20, 2023
PyPI
requests-pandas 3.10.17
MAL-2023-1403 ossf-package-analysis

May 20, 2023