Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,168 npm 223,991 PyPI 12,027 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,027 reports · Feed

  • PyPI
    selfstrresuper all versions
    MAL-2023-6651 checkmarx 2 IOCs
  • PyPI
    py-pushpingload all versions
    MAL-2023-5518 checkmarx 2 IOCs
  • PyPI
    libkilledgame all versions
    MAL-2023-4138 checkmarx 2 IOCs
  • PyPI
    selfcvedpep all versions
    MAL-2023-6014 checkmarx 2 IOCs
  • PyPI
    tpreplacekillram all versions
    MAL-2023-7559 checkmarx 2 IOCs
  • PyPI
    py-postvirtualreplace all versions
    MAL-2023-5479 checkmarx 2 IOCs
  • PyPI
    librandomintelgame all versions
    MAL-2023-4458 checkmarx 2 IOCs
  • PyPI
    esqrecpuvm all versions
    MAL-2023-3356 checkmarx 2 IOCs
  • PyPI
    libpiposintmc all versions
    MAL-2023-4327 checkmarx 2 IOCs
  • PyPI
    esqvisastred all versions
    MAL-2023-3552 checkmarx 2 IOCs
  • PyPI
    esqtoolvisaram all versions
    MAL-2023-3491 checkmarx 2 IOCs
  • PyPI
    esqosinthackedstudy all versions
    MAL-2023-3149 checkmarx 2 IOCs
  • PyPI
    tpstudystringpep all versions
    MAL-2023-7640 checkmarx 2 IOCs
  • PyPI
    tppushvmgrand all versions
    MAL-2023-7454 checkmarx 2 IOCs
  • PyPI
    selfcandyhttpnvidia all versions
    MAL-2023-5947 checkmarx 2 IOCs
  • PyPI
    libpullurlcandy all versions
    MAL-2023-4388 checkmarx 2 IOCs
  • PyPI
    libintproofpush all versions
    MAL-2023-4132 checkmarx 2 IOCs
  • PyPI
    esqnvidiapaypalmask all versions
    MAL-2023-3137 checkmarx 2 IOCs
  • PyPI
    py-pepminepy all versions
    MAL-2023-5416 checkmarx 2 IOCs
  • PyPI
    esqtoolultralgtb all versions
    MAL-2023-3489 checkmarx 2 IOCs
  • PyPI
    libsuperintram all versions
    MAL-2023-4548 checkmarx 2 IOCs
  • PyPI
    libstrpushkill all versions
    MAL-2023-4526 checkmarx 2 IOCs
  • PyPI
    esqverinfostr all versions
    MAL-2023-3518 checkmarx 2 IOCs
  • PyPI
    py-proofsplitpy all versions
    MAL-2023-5495 checkmarx 2 IOCs
  • PyPI
    libvisacvcontrol all versions
    MAL-2023-4638 checkmarx 2 IOCs
  • PyPI
    tpramcced all versions
    MAL-2023-7499 checkmarx 2 IOCs
  • PyPI
    tpadmaskcandy all versions
    MAL-2023-6907 checkmarx 2 IOCs
  • PyPI
    libhackedkillcontrol all versions
    MAL-2023-4057 checkmarx 2 IOCs
  • PyPI
    selfcraftpipvirtual all versions
    MAL-2023-6007 checkmarx 2 IOCs
  • PyPI
    esqpullcraftlgtb all versions
    MAL-2023-3260 checkmarx 2 IOCs
  • PyPI
    esqgameultracandy all versions
    MAL-2023-2886 checkmarx 2 IOCs
  • PyPI
    tppullccre all versions
    MAL-2023-7421 checkmarx 2 IOCs
  • PyPI
    tppostreplacevisa all versions
    MAL-2023-7397 checkmarx 2 IOCs
  • PyPI
    selfproofhttpsplit all versions
    MAL-2023-6486 checkmarx 2 IOCs
  • PyPI
    tppeppullintel all versions
    MAL-2023-7338 checkmarx 2 IOCs
  • PyPI
    selfrandsplitre all versions
    MAL-2023-6588 checkmarx 2 IOCs
  • PyPI
    selfpullrecontrol all versions
    MAL-2023-6509 checkmarx 2 IOCs
  • PyPI
    esqedpypy all versions
    MAL-2023-2846 checkmarx 2 IOCs
  • PyPI
    selfrandominfoping all versions
    MAL-2023-6572 checkmarx 2 IOCs
  • PyPI
    selfpullgamegame all versions
    MAL-2023-6502 checkmarx 2 IOCs