Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,168 npm 223,991 PyPI 12,027 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,027 reports · Feed

  • PyPI
    esqcvvermask all versions
    MAL-2023-2834 checkmarx 2 IOCs
  • PyPI
    esqcvinfogrand all versions
    MAL-2023-2825 checkmarx 2 IOCs
  • PyPI
    libcvproofstr all versions
    MAL-2023-3962 checkmarx 2 IOCs
  • PyPI
    esqurlencodead all versions
    MAL-2023-3502 checkmarx 2 IOCs
  • PyPI
    libgrandlibpyw all versions
    MAL-2023-4019 checkmarx 2 IOCs
  • PyPI
    selfintstringpong all versions
    MAL-2023-6233 checkmarx 2 IOCs
  • PyPI
    py-controlguipost all versions
    MAL-2023-5030 checkmarx 2 IOCs
  • PyPI
    tpmcpongpaypal all versions
    MAL-2023-7263 checkmarx 2 IOCs
  • PyPI
    tprepaypalpull all versions
    MAL-2023-7553 checkmarx 2 IOCs
  • PyPI
    selfhydrainfoproof all versions
    MAL-2023-6181 checkmarx 2 IOCs
  • PyPI
    esqverpyosint all versions
    MAL-2023-3524 checkmarx 2 IOCs
  • PyPI
    esqstudyrepull all versions
    MAL-2023-3457 checkmarx 2 IOCs
  • PyPI
    selfhttpmcpush all versions
    MAL-2023-6167 checkmarx 2 IOCs
  • PyPI
    py-urlhttphttp all versions
    MAL-2023-5722 checkmarx 2 IOCs
  • PyPI
    selfinfoponged all versions
    MAL-2023-6207 checkmarx 2 IOCs
  • PyPI
    py-paypalinfopip all versions
    MAL-2023-5395 checkmarx 2 IOCs
  • PyPI
    esqnvidiaadram all versions
    MAL-2023-3130 checkmarx 2 IOCs
  • PyPI
    selfguiurlpush all versions
    MAL-2023-6137 checkmarx 2 IOCs
  • PyPI
    selfgetstudyram all versions
    MAL-2023-6100 checkmarx 2 IOCs
  • PyPI
    selfsupergameencode all versions
    MAL-2023-6674 checkmarx 2 IOCs
  • PyPI
    esqpywlgtbnvidia all versions
    MAL-2023-3304 checkmarx 2 IOCs
  • PyPI
    esqintstudyhacked all versions
    MAL-2023-3019 checkmarx 2 IOCs
  • PyPI
    libcraftlgtbload all versions
    MAL-2023-3941 checkmarx 2 IOCs
  • PyPI
    esqproofosintkill all versions
    MAL-2023-3248 checkmarx 2 IOCs
  • PyPI
    tpkillpeppep all versions
    MAL-2023-7188 checkmarx 2 IOCs
  • PyPI
    py-intelpepsplit all versions
    MAL-2023-5236 checkmarx 2 IOCs
  • PyPI
    esqlibcpuosint all versions
    MAL-2023-3050 checkmarx 2 IOCs
  • PyPI
    tppongvisapip all versions
    MAL-2023-7385 checkmarx 2 IOCs
  • PyPI
    selfcvinfoad all versions
    MAL-2023-6017 checkmarx 2 IOCs
  • PyPI
    tpedstrproof all versions
    MAL-2023-7009 checkmarx 2 IOCs
  • PyPI
    esqpostintelcpu all versions
    MAL-2023-3232 checkmarx 2 IOCs
  • PyPI
    selfstudytoolrandom all versions
    MAL-2023-6669 checkmarx 2 IOCs
  • PyPI
    tppingvirtualrand all versions
    MAL-2023-7357 checkmarx 2 IOCs
  • PyPI
    tppywpostram all versions
    MAL-2023-7490 checkmarx 2 IOCs
  • PyPI
    selfrandomhackedstudy all versions
    MAL-2023-6570 checkmarx 2 IOCs
  • PyPI
    selfhydrastudycc all versions
    MAL-2023-6190 checkmarx 2 IOCs
  • PyPI
    selfccvirtualgame all versions
    MAL-2023-5966 checkmarx 2 IOCs
  • PyPI
    tpintelpullcpu all versions
    MAL-2023-7162 checkmarx 2 IOCs
  • PyPI
    selfrandompullver all versions
    MAL-2023-6579 checkmarx 2 IOCs
  • PyPI
    selfproofstudyrand all versions
    MAL-2023-6498 checkmarx 2 IOCs