Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,168 npm 223,991 PyPI 12,027 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,027 reports · Feed

  • PyPI
    selfloadcvencode all versions
    MAL-2023-6286 checkmarx 2 IOCs
  • PyPI
    py-nvidiaguistr all versions
    MAL-2023-5360 checkmarx 2 IOCs
  • PyPI
    tpintgamevirtual all versions
    MAL-2023-7169 checkmarx 2 IOCs
  • PyPI
    selfcvstrpong all versions
    MAL-2023-6027 checkmarx 2 IOCs
  • PyPI
    esqvirtualintpep all versions
    MAL-2023-3532 checkmarx 2 IOCs
  • PyPI
    py-libpipintel all versions
    MAL-2023-5294 checkmarx 2 IOCs
  • PyPI
    libstudypipstring all versions
    MAL-2023-4535 checkmarx 2 IOCs
  • PyPI
    esqloadhackednvidia all versions
    MAL-2023-3068 checkmarx 2 IOCs
  • PyPI
    tpcandykillget all versions
    MAL-2023-6925 checkmarx 2 IOCs
  • PyPI
    libreplacecontrolproof all versions
    MAL-2023-4474 checkmarx 2 IOCs
  • PyPI
    tpurlmcstring all versions
    MAL-2023-7686 checkmarx 2 IOCs
  • PyPI
    tppushmaskpull all versions
    MAL-2023-7446 checkmarx 2 IOCs
  • PyPI
    libvisaurlgui all versions
    MAL-2023-4652 checkmarx 2 IOCs
  • PyPI
    esqmaskcpustring all versions
    MAL-2023-3079 checkmarx 2 IOCs
  • PyPI
    esqinfostrget all versions
    MAL-2023-2988 checkmarx 2 IOCs
  • PyPI
    tpsupercpuintel all versions
    MAL-2023-7644 checkmarx 2 IOCs
  • PyPI
    tppingultraload all versions
    MAL-2023-7355 checkmarx 2 IOCs
  • PyPI
    selfcvpaypalram all versions
    MAL-2023-6021 checkmarx 2 IOCs
  • PyPI
    py-verstrosint all versions
    MAL-2023-5742 checkmarx 2 IOCs
  • PyPI
    py-pullhackedmine all versions
    MAL-2023-5500 checkmarx 2 IOCs
  • PyPI
    py-paypalvirtualinfo all versions
    MAL-2023-5409 checkmarx 2 IOCs
  • PyPI
    esqreplacegrandpep all versions
    MAL-2023-3368 checkmarx 2 IOCs
  • PyPI
    selfpongsplitsplit all versions
    MAL-2023-6464 checkmarx 2 IOCs
  • PyPI
    selfcontrolverrand all versions
    MAL-2023-5984 checkmarx 2 IOCs
  • PyPI
    py-ccpongver all versions
    MAL-2023-5020 checkmarx 2 IOCs
  • PyPI
    libramcpuhacked all versions
    MAL-2023-4430 checkmarx 2 IOCs
  • PyPI
    libhackedstrreplace all versions
    MAL-2023-4065 checkmarx 2 IOCs
  • PyPI
    tpreplacegrandrandom all versions
    MAL-2023-7557 checkmarx 2 IOCs
  • PyPI
    tpmcedtool all versions
    MAL-2023-7255 checkmarx 2 IOCs
  • PyPI
    tpguicontrolvirtual all versions
    MAL-2023-7075 checkmarx 2 IOCs
  • PyPI
    py-urlcandypy all versions
    MAL-2023-5720 checkmarx 2 IOCs
  • PyPI
    py-httprevisa all versions
    MAL-2023-5185 checkmarx 2 IOCs
  • PyPI
    esqpywponggui all versions
    MAL-2023-3311 checkmarx 2 IOCs
  • PyPI
    selfpongvisanvidia all versions
    MAL-2023-6466 checkmarx 2 IOCs
  • PyPI
    py-intelstringencode all versions
    MAL-2023-5240 checkmarx 2 IOCs
  • PyPI
    libpepcclib all versions
    MAL-2023-4293 checkmarx 2 IOCs
  • PyPI
    libmclibed all versions
    MAL-2023-4230 checkmarx 2 IOCs
  • PyPI
    libloadpostvm all versions
    MAL-2023-4196 checkmarx 2 IOCs
  • PyPI
    esqcvgetkill all versions
    MAL-2023-2822 checkmarx 2 IOCs
  • PyPI
    tprandomultrapost all versions
    MAL-2023-7528 checkmarx 2 IOCs