Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,168 npm 223,991 PyPI 12,027 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,027 reports · Feed

  • PyPI
    libpipultravirtual all versions
    MAL-2023-4330 checkmarx 2 IOCs
  • PyPI
    sagemakertransformers 0.0.3
    MAL-2023-9 ossf-package-analysis
  • PyPI
    libtpu-nightly 0.1.dev20230207
    MAL-2023-1375 ossf-package-analysis
  • PyPI
    kangpy 1.0
    MAL-2023-8 ossf-package-analysis
  • PyPI
    yc-as-client 11.11.3
    MAL-2023-1422 ossf-package-analysis
  • PyPI
    roblopython 2.0.15
    MAL-2023-1404 ossf-package-analysis
  • PyPI
    service-etl 11.11.3
    MAL-2023-1408 ossf-package-analysis
  • PyPI
    taxi-etl 11.11.3
    MAL-2023-1418 ossf-package-analysis
  • PyPI
    dmp-suite 11.11.3
    MAL-2023-1363 ossf-package-analysis
  • PyPI
    example-package-taxi-etl 0.0.3
    MAL-2023-1364 ossf-package-analysis
  • PyPI
    tucan-x 0.0.2, 0.0.1
    MAL-2023-1421 ossf-package-analysis
  • PyPI
    rawrequest all versions
    MAL-2023-5898 checkmarx 2 IOCs
  • PyPI
    tpcraftcraftencode all versions
    MAL-2023-6974 checkmarx 2 IOCs
  • PyPI
    selfvisapaypalmine all versions
    MAL-2023-6777 checkmarx 2 IOCs
  • PyPI
    esqguiproofad all versions
    MAL-2023-2934 checkmarx 2 IOCs
  • PyPI
    selfmccontrolstudy all versions
    MAL-2023-6320 checkmarx 2 IOCs
  • PyPI
    py-controlpingcraft all versions
    MAL-2023-5033 checkmarx 2 IOCs
  • PyPI
    esqccpongcpu all versions
    MAL-2023-2760 checkmarx 2 IOCs
  • PyPI
    tpcvadlib all versions
    MAL-2023-6982 checkmarx 2 IOCs
  • PyPI
    libguireplaceram all versions
    MAL-2023-4046 checkmarx 2 IOCs
  • PyPI
    libguigrandmc all versions
    MAL-2023-4035 checkmarx 2 IOCs
  • PyPI
    esqccstringmask all versions
    MAL-2023-2770 checkmarx 2 IOCs
  • PyPI
    selfedgamestudy all versions
    MAL-2023-6033 checkmarx 2 IOCs
  • PyPI
    py-mcultracraft all versions
    MAL-2023-5343 checkmarx 2 IOCs
  • PyPI
    libpingreintel all versions
    MAL-2023-4315 checkmarx 2 IOCs
  • PyPI
    tpcvurlpong all versions
    MAL-2023-6996 checkmarx 2 IOCs
  • PyPI
    py-toolvmintel all versions
    MAL-2023-5702 checkmarx 2 IOCs
  • PyPI
    libpywvisavirtual all versions
    MAL-2023-4427 checkmarx 2 IOCs
  • PyPI
    esqproofpostvisa all versions
    MAL-2023-3251 checkmarx 2 IOCs
  • PyPI
    esqgetlibpyw all versions
    MAL-2023-2895 checkmarx 2 IOCs
  • PyPI
    libosintliblgtb all versions
    MAL-2023-4270 checkmarx 2 IOCs
  • PyPI
    esqtoolinfoultra all versions
    MAL-2023-3478 checkmarx 2 IOCs
  • PyPI
    esqrestrhttp all versions
    MAL-2023-3386 checkmarx 2 IOCs
  • PyPI
    esqnvidiamaskvirtual all versions
    MAL-2023-3136 checkmarx 2 IOCs
  • PyPI
    libpongcvvm all versions
    MAL-2023-4331 checkmarx 2 IOCs
  • PyPI
    py-replacestringcandy all versions
    MAL-2023-5608 checkmarx 2 IOCs
  • PyPI
    tphydratoolsplit all versions
    MAL-2023-7133 checkmarx 2 IOCs
  • PyPI
    selfencodemaskpong all versions
    MAL-2023-6051 checkmarx 2 IOCs
  • PyPI
    esqproofinthydra all versions
    MAL-2023-3246 checkmarx 2 IOCs
  • PyPI
    esqinfostrosint all versions
    MAL-2023-2989 checkmarx 2 IOCs