Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,168 npm 223,991 PyPI 12,027 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,027 reports · Feed

  • PyPI
    tpencodesplitpyw all versions
    MAL-2023-7023 checkmarx 2 IOCs
  • PyPI
    libstrrandreplace all versions
    MAL-2023-4527 checkmarx 2 IOCs
  • PyPI
    esqedcvhacked all versions
    MAL-2023-2837 checkmarx 2 IOCs
  • PyPI
    esqcandyadvisa all versions
    MAL-2023-2742 checkmarx 2 IOCs
  • PyPI
    py-verhackedvirtual all versions
    MAL-2023-5733 checkmarx 2 IOCs
  • PyPI
    py-httpvirtualmask all versions
    MAL-2023-5189 checkmarx 2 IOCs
  • PyPI
    py-hackedinfoproof all versions
    MAL-2023-5156 checkmarx 2 IOCs
  • PyPI
    selfcvmineget all versions
    MAL-2023-6020 checkmarx 2 IOCs
  • PyPI
    selfccvmosint all versions
    MAL-2023-5967 checkmarx 2 IOCs
  • PyPI
    libcontrolstringcc all versions
    MAL-2023-3917 checkmarx 2 IOCs
  • PyPI
    esqrandomhttpstudy all versions
    MAL-2023-3336 checkmarx 2 IOCs
  • PyPI
    esqintloadping all versions
    MAL-2023-3011 checkmarx 2 IOCs
  • PyPI
    selfstrtoolsplit all versions
    MAL-2023-6654 checkmarx 2 IOCs
  • PyPI
    tplibintstr all versions
    MAL-2023-7211 checkmarx 2 IOCs
  • PyPI
    tpgrandnvidiapep all versions
    MAL-2023-7066 checkmarx 2 IOCs
  • PyPI
    py-pepadpull all versions
    MAL-2023-5410 checkmarx 2 IOCs
  • PyPI
    libpushcvpaypal all versions
    MAL-2023-4392 checkmarx 2 IOCs
  • PyPI
    tpstrpeplgtb all versions
    MAL-2023-7625 checkmarx 2 IOCs
  • PyPI
    selfmaskgamepull all versions
    MAL-2023-6302 checkmarx 2 IOCs
  • PyPI
    py-pingloadcontrol all versions
    MAL-2023-5434 checkmarx 2 IOCs
  • PyPI
    py-hackedccencode all versions
    MAL-2023-5152 checkmarx 2 IOCs
  • PyPI
    tppingcpuget all versions
    MAL-2023-7344 checkmarx 2 IOCs
  • PyPI
    tpcpuintpep all versions
    MAL-2023-6964 checkmarx 2 IOCs
  • PyPI
    py-reguipong all versions
    MAL-2023-5593 checkmarx 2 IOCs
  • PyPI
    py-paypalpostcandy all versions
    MAL-2023-5401 checkmarx 2 IOCs
  • PyPI
    libhackedosintvm all versions
    MAL-2023-4060 checkmarx 2 IOCs
  • PyPI
    libcpupywmine all versions
    MAL-2023-3931 checkmarx 2 IOCs
  • PyPI
    esqvirtualkillint all versions
    MAL-2023-3533 checkmarx 2 IOCs
  • PyPI
    esqstudypiprand all versions
    MAL-2023-3454 checkmarx 2 IOCs
  • PyPI
    esqrandompullad all versions
    MAL-2023-3343 checkmarx 2 IOCs
  • PyPI
    esqencodegameproof all versions
    MAL-2023-2855 checkmarx 2 IOCs
  • PyPI
    selfintstringstr all versions
    MAL-2023-6234 checkmarx 2 IOCs
  • PyPI
    selfccreplacever all versions
    MAL-2023-5963 checkmarx 2 IOCs
  • PyPI
    libgrandverultra all versions
    MAL-2023-4030 checkmarx 2 IOCs
  • PyPI
    esqvisaverload all versions
    MAL-2023-3555 checkmarx 2 IOCs
  • PyPI
    esqstringvirtualtool all versions
    MAL-2023-3433 checkmarx 2 IOCs
  • PyPI
    esqmaskgrandcc all versions
    MAL-2023-3082 checkmarx 2 IOCs
  • PyPI
    tpstrsplitvirtual all versions
    MAL-2023-7631 checkmarx 2 IOCs
  • PyPI
    tpstrlibhydra all versions
    MAL-2023-7620 checkmarx 2 IOCs
  • PyPI
    tpintelvercandy all versions
    MAL-2023-7167 checkmarx 2 IOCs