Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,168 npm 223,991 PyPI 12,027 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,027 reports · Feed

  • PyPI
    tpmaskpushre all versions
    MAL-2023-7248 checkmarx 2 IOCs
  • PyPI
    esqverpaypalsuper all versions
    MAL-2023-3522 checkmarx 2 IOCs
  • PyPI
    tposintponghydra all versions
    MAL-2023-7313 checkmarx 2 IOCs
  • PyPI
    selfpostultraultra all versions
    MAL-2023-6482 checkmarx 2 IOCs
  • PyPI
    selfnvidiapushhacked all versions
    MAL-2023-6353 checkmarx 2 IOCs
  • PyPI
    selfgrandkillhacked all versions
    MAL-2023-6113 checkmarx 2 IOCs
  • PyPI
    py-pullgrandinfo all versions
    MAL-2023-5499 checkmarx 2 IOCs
  • PyPI
    libloadurlrand all versions
    MAL-2023-4202 checkmarx 2 IOCs
  • PyPI
    esqsupergrandstr all versions
    MAL-2023-3466 checkmarx 2 IOCs
  • PyPI
    tpgrandreplacerand all versions
    MAL-2023-7069 checkmarx 2 IOCs
  • PyPI
    selfpingponggui all versions
    MAL-2023-6430 checkmarx 2 IOCs
  • PyPI
    py-lgtbpywhttp all versions
    MAL-2023-5281 checkmarx 2 IOCs
  • PyPI
    py-lgtbpyhacked all versions
    MAL-2023-5280 checkmarx 2 IOCs
  • PyPI
    py-adpaypalkill all versions
    MAL-2023-4989 checkmarx 2 IOCs
  • PyPI
    libinforampy all versions
    MAL-2023-4106 checkmarx 2 IOCs
  • PyPI
    libgrandrammc all versions
    MAL-2023-4026 checkmarx 2 IOCs
  • PyPI
    esqpushhttpad all versions
    MAL-2023-3279 checkmarx 2 IOCs
  • PyPI
    esqcvcraftmc all versions
    MAL-2023-2820 checkmarx 2 IOCs
  • PyPI
    tpsplitpaypalmask all versions
    MAL-2023-7589 checkmarx 2 IOCs
  • PyPI
    tploadgrandhttp all versions
    MAL-2023-7224 checkmarx 2 IOCs
  • PyPI
    selfvirtualstringvisa all versions
    MAL-2023-6766 checkmarx 2 IOCs
  • PyPI
    selfpostgamemc all versions
    MAL-2023-6469 checkmarx 2 IOCs
  • PyPI
    libintmccontrol all versions
    MAL-2023-4130 checkmarx 2 IOCs
  • PyPI
    esqintelrevirtual all versions
    MAL-2023-3003 checkmarx 2 IOCs
  • PyPI
    py-randvisavisa all versions
    MAL-2023-5589 checkmarx 2 IOCs
  • PyPI
    py-intpywcandy all versions
    MAL-2023-5248 checkmarx 2 IOCs
  • PyPI
    esqstrencodehacked all versions
    MAL-2023-3410 checkmarx 2 IOCs
  • PyPI
    esqpaypalpulled all versions
    MAL-2023-3173 checkmarx 2 IOCs
  • PyPI
    tpvirtualintelmask all versions
    MAL-2023-7708 checkmarx 2 IOCs
  • PyPI
    liblgtbpushpost all versions
    MAL-2023-4169 checkmarx 2 IOCs
  • PyPI
    libintelurllgtb all versions
    MAL-2023-4123 checkmarx 2 IOCs
  • PyPI
    libinfovirtualcontrol all versions
    MAL-2023-4110 checkmarx 2 IOCs
  • PyPI
    libloadcraftcv all versions
    MAL-2023-4190 checkmarx 2 IOCs
  • PyPI
    esqrandultrare all versions
    MAL-2023-3353 checkmarx 2 IOCs
  • PyPI
    selfultramineint all versions
    MAL-2023-6708 checkmarx 2 IOCs
  • PyPI
    libsupergrandpull all versions
    MAL-2023-4544 checkmarx 2 IOCs
  • PyPI
    tpstrstrram all versions
    MAL-2023-7632 checkmarx 2 IOCs
  • PyPI
    tpreplacepushstudy all versions
    MAL-2023-7565 checkmarx 2 IOCs
  • PyPI
    tppullhttpping all versions
    MAL-2023-7424 checkmarx 2 IOCs
  • PyPI
    libstringstringram all versions
    MAL-2023-4520 checkmarx 2 IOCs