Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,168 npm 223,991 PyPI 12,027 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,027 reports · Feed

  • PyPI
    esqgameloadrandom all versions
    MAL-2023-2875 checkmarx 2 IOCs
  • PyPI
    selfinturlstudy all versions
    MAL-2023-6238 checkmarx 2 IOCs
  • PyPI
    libvirtualsplitstring all versions
    MAL-2023-4635 checkmarx 2 IOCs
  • PyPI
    libpipinfoad all versions
    MAL-2023-4324 checkmarx 2 IOCs
  • PyPI
    libcontrolverlgtb all versions
    MAL-2023-3923 checkmarx 2 IOCs
  • PyPI
    esqlibkillstr all versions
    MAL-2023-3052 checkmarx 2 IOCs
  • PyPI
    tpreloadad all versions
    MAL-2023-7551 checkmarx 2 IOCs
  • PyPI
    selfpaypalcontrolsuper all versions
    MAL-2023-6386 checkmarx 2 IOCs
  • PyPI
    esqsplitpushpush all versions
    MAL-2023-3404 checkmarx 2 IOCs
  • PyPI
    selflibmineload all versions
    MAL-2023-6274 checkmarx 2 IOCs
  • PyPI
    py-infohydrarandom all versions
    MAL-2023-5208 checkmarx 2 IOCs
  • PyPI
    tpstringcraftget all versions
    MAL-2023-7604 checkmarx 2 IOCs
  • PyPI
    libpywstrvm all versions
    MAL-2023-4426 checkmarx 2 IOCs
  • PyPI
    esqproofpongint all versions
    MAL-2023-3249 checkmarx 2 IOCs
  • PyPI
    selfosintgrandrandom all versions
    MAL-2023-6364 checkmarx 2 IOCs
  • PyPI
    tppinghackedpaypal all versions
    MAL-2023-7345 checkmarx 2 IOCs
  • PyPI
    liburlcraftgrand all versions
    MAL-2023-4588 checkmarx 2 IOCs
  • PyPI
    selfguiccproof all versions
    MAL-2023-6126 checkmarx 2 IOCs
  • PyPI
    selfcontroledintel all versions
    MAL-2023-5968 checkmarx 2 IOCs
  • PyPI
    esqintmaskgui all versions
    MAL-2023-3012 checkmarx 2 IOCs
  • PyPI
    tppywloadhydra all versions
    MAL-2023-7487 checkmarx 2 IOCs
  • PyPI
    py-intelpingvm all versions
    MAL-2023-5238 checkmarx 2 IOCs
  • PyPI
    esqgameguiintel all versions
    MAL-2023-2870 checkmarx 2 IOCs
  • PyPI
    tppeppushpyw all versions
    MAL-2023-7339 checkmarx 2 IOCs
  • PyPI
    esqmasksplitpush all versions
    MAL-2023-3091 checkmarx 2 IOCs
  • PyPI
    esqguipippost all versions
    MAL-2023-2931 checkmarx 2 IOCs
  • PyPI
    tpmaskvisacontrol all versions
    MAL-2023-7252 checkmarx 2 IOCs
  • PyPI
    selframstudyget all versions
    MAL-2023-6563 checkmarx 2 IOCs
  • PyPI
    esqsplitmaskpy all versions
    MAL-2023-3395 checkmarx 2 IOCs
  • PyPI
    tpliburlver all versions
    MAL-2023-7217 checkmarx 2 IOCs
  • PyPI
    selfinfopushpip all versions
    MAL-2023-6208 checkmarx 2 IOCs
  • PyPI
    py-pywvisahydra all versions
    MAL-2023-5543 checkmarx 2 IOCs
  • PyPI
    tpmaskintelpull all versions
    MAL-2023-7241 checkmarx 2 IOCs
  • PyPI
    selfosintlgtbstr all versions
    MAL-2023-6367 checkmarx 2 IOCs
  • PyPI
    py-ultraproofinfo all versions
    MAL-2023-5712 checkmarx 2 IOCs
  • PyPI
    selfpingintelvm all versions
    MAL-2023-6425 checkmarx 2 IOCs
  • PyPI
    tppongadultra all versions
    MAL-2023-7374 checkmarx 2 IOCs
  • PyPI
    libpullpongpaypal all versions
    MAL-2023-4381 checkmarx 2 IOCs
  • PyPI
    esqcandyosintcandy all versions
    MAL-2023-2746 checkmarx 2 IOCs
  • PyPI
    selfgamevirtualad all versions
    MAL-2023-6089 checkmarx 2 IOCs