Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,168 npm 223,991 PyPI 12,027 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,027 reports · Feed

  • PyPI
    py-pywposthacked all versions
    MAL-2023-5537 checkmarx 2 IOCs
  • PyPI
    py-infoliblgtb all versions
    MAL-2023-5212 checkmarx 2 IOCs
  • PyPI
    libsplitrandomencode all versions
    MAL-2023-4500 checkmarx 2 IOCs
  • PyPI
    libpywreproof all versions
    MAL-2023-4425 checkmarx 2 IOCs
  • PyPI
    esqkillpongrand all versions
    MAL-2023-3029 checkmarx 2 IOCs
  • PyPI
    tpmccvpong all versions
    MAL-2023-7254 checkmarx 2 IOCs
  • PyPI
    selfmcvisapy all versions
    MAL-2023-6330 checkmarx 2 IOCs
  • PyPI
    selfcandystudystudy all versions
    MAL-2023-5952 checkmarx 2 IOCs
  • PyPI
    py-randcpustr all versions
    MAL-2023-5561 checkmarx 2 IOCs
  • PyPI
    libintelkillvm all versions
    MAL-2023-4118 checkmarx 2 IOCs
  • PyPI
    esqrandadget all versions
    MAL-2023-3329 checkmarx 2 IOCs
  • PyPI
    esqcpustudyhydra all versions
    MAL-2023-2799 checkmarx 2 IOCs
  • PyPI
    tpguiintelcv all versions
    MAL-2023-7082 checkmarx 2 IOCs
  • PyPI
    py-strramgui all versions
    MAL-2023-5652 checkmarx 2 IOCs
  • PyPI
    libmaskosinthydra all versions
    MAL-2023-4212 checkmarx 2 IOCs
  • PyPI
    esqultralgtbhydra all versions
    MAL-2023-3494 checkmarx 2 IOCs
  • PyPI
    tptoolintelram all versions
    MAL-2023-7658 checkmarx 2 IOCs
  • PyPI
    tpguiosintre all versions
    MAL-2023-7086 checkmarx 2 IOCs
  • PyPI
    py-minestrcv all versions
    MAL-2023-5357 checkmarx 2 IOCs
  • PyPI
    libtoolcvgui all versions
    MAL-2023-4561 checkmarx 2 IOCs
  • PyPI
    libintcpusplit all versions
    MAL-2023-4112 checkmarx 2 IOCs
  • PyPI
    libhydraedstudy all versions
    MAL-2023-4082 checkmarx 2 IOCs
  • PyPI
    esqposthackedver all versions
    MAL-2023-3228 checkmarx 2 IOCs
  • PyPI
    tpvmcraftmine all versions
    MAL-2023-7733 checkmarx 2 IOCs
  • PyPI
    tplibvirtualram all versions
    MAL-2023-7218 checkmarx 2 IOCs
  • PyPI
    py-urlmcvisa all versions
    MAL-2023-5724 checkmarx 2 IOCs
  • PyPI
    libstrproofurl all versions
    MAL-2023-4523 checkmarx 2 IOCs
  • PyPI
    esqpaypalpongcc all versions
    MAL-2023-3172 checkmarx 2 IOCs
  • PyPI
    esqosintcraftram all versions
    MAL-2023-3147 checkmarx 2 IOCs
  • PyPI
    selfrandompostint all versions
    MAL-2023-6578 checkmarx 2 IOCs
  • PyPI
    liburlosintstudy all versions
    MAL-2023-4591 checkmarx 2 IOCs
  • PyPI
    librandproofhttp all versions
    MAL-2023-4463 checkmarx 2 IOCs
  • PyPI
    selfgrandedgame all versions
    MAL-2023-6108 checkmarx 2 IOCs
  • PyPI
    py-cvcrafturl all versions
    MAL-2023-5064 checkmarx 2 IOCs
  • PyPI
    tploadpostosint all versions
    MAL-2023-7234 checkmarx 2 IOCs
  • PyPI
    selfcvcvsuper all versions
    MAL-2023-6013 checkmarx 2 IOCs
  • PyPI
    py-studyedstr all versions
    MAL-2023-5658 checkmarx 2 IOCs
  • PyPI
    tpstrmcint all versions
    MAL-2023-7624 checkmarx 2 IOCs
  • PyPI
    tppyinfocandy all versions
    MAL-2023-7462 checkmarx 2 IOCs
  • PyPI
    tpgrandencodegui all versions
    MAL-2023-7060 checkmarx 2 IOCs