Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,168 npm 223,991 PyPI 12,027 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,027 reports · Feed

  • PyPI
    libcrafthackedsplit all versions
    MAL-2023-3939 checkmarx 2 IOCs
  • PyPI
    selfinfopaypalad all versions
    MAL-2023-6205 checkmarx 2 IOCs
  • PyPI
    esqintpaypalram all versions
    MAL-2023-3013 checkmarx 2 IOCs
  • PyPI
    libcckillhydra all versions
    MAL-2023-3893 checkmarx 2 IOCs
  • PyPI
    esqrandompullmine all versions
    MAL-2023-3344 checkmarx 2 IOCs
  • PyPI
    selfstringpullpush all versions
    MAL-2023-6640 checkmarx 2 IOCs
  • PyPI
    esqpingpingcontrol all versions
    MAL-2023-3200 checkmarx 2 IOCs
  • PyPI
    tpcvultrainfo all versions
    MAL-2023-6995 checkmarx 2 IOCs
  • PyPI
    selfgamepypost all versions
    MAL-2023-6082 checkmarx 2 IOCs
  • PyPI
    libminerandomosint all versions
    MAL-2023-4245 checkmarx 2 IOCs
  • PyPI
    esqcvcpupy all versions
    MAL-2023-2819 checkmarx 2 IOCs
  • PyPI
    esqcraftlibcv all versions
    MAL-2023-2808 checkmarx 2 IOCs
  • PyPI
    esqccpullvirtual all versions
    MAL-2023-2763 checkmarx 2 IOCs
  • PyPI
    tpccpinghacked all versions
    MAL-2023-6937 checkmarx 2 IOCs
  • PyPI
    libcontrolhttpstr all versions
    MAL-2023-3905 checkmarx 2 IOCs
  • PyPI
    esqhttppywinfo all versions
    MAL-2023-2958 checkmarx 2 IOCs
  • PyPI
    esqcpupipkill all versions
    MAL-2023-2794 checkmarx 2 IOCs
  • PyPI
    selfpostmcintel all versions
    MAL-2023-6474 checkmarx 2 IOCs
  • PyPI
    py-proofnvidiavm all versions
    MAL-2023-5488 checkmarx 2 IOCs
  • PyPI
    esqhttpguicc all versions
    MAL-2023-2950 checkmarx 2 IOCs
  • PyPI
    esqpepintpyw all versions
    MAL-2023-3181 checkmarx 2 IOCs
  • PyPI
    esqpaypalnvidiaurl all versions
    MAL-2023-3169 checkmarx 2 IOCs
  • PyPI
    librereplacereplace all versions
    MAL-2023-4490 checkmarx 2 IOCs
  • PyPI
    py-ultrageturl all versions
    MAL-2023-5707 checkmarx 2 IOCs
  • PyPI
    tppylgtbnvidia all versions
    MAL-2023-7466 checkmarx 2 IOCs
  • PyPI
    esqrerecandy all versions
    MAL-2023-3384 checkmarx 2 IOCs
  • PyPI
    libgetrandram all versions
    MAL-2023-4008 checkmarx 2 IOCs
  • PyPI
    esqpeprandpaypal all versions
    MAL-2023-3187 checkmarx 2 IOCs
  • PyPI
    tppyrandomed all versions
    MAL-2023-7476 checkmarx 2 IOCs
  • PyPI
    py-hydraurlstudy all versions
    MAL-2023-5206 checkmarx 2 IOCs
  • PyPI
    esqhackedlgtbpip all versions
    MAL-2023-2942 checkmarx 2 IOCs
  • PyPI
    tptoolpywgui all versions
    MAL-2023-7664 checkmarx 2 IOCs
  • PyPI
    selfhackedrandomstudy all versions
    MAL-2023-6157 checkmarx 2 IOCs
  • PyPI
    esqultraultrapong all versions
    MAL-2023-3498 checkmarx 2 IOCs
  • PyPI
    selfvisapostosint all versions
    MAL-2023-6779 checkmarx 2 IOCs
  • PyPI
    py-hackedultratool all versions
    MAL-2023-5170 checkmarx 2 IOCs
  • PyPI
    libccreplacemask all versions
    MAL-2023-3897 checkmarx 2 IOCs
  • PyPI
    selfreplacetoolreplace all versions
    MAL-2023-6610 checkmarx 2 IOCs
  • PyPI
    py-vmpullinfo all versions
    MAL-2023-5787 checkmarx 2 IOCs
  • PyPI
    libguicraftcandy all versions
    MAL-2023-4032 checkmarx 2 IOCs