Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,169 npm 223,992 PyPI 12,027 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,027 reports · Feed

  • PyPI
    selfmcreed all versions
    MAL-2023-6328 checkmarx 2 IOCs
  • PyPI
    selfgamecontrolhydra all versions
    MAL-2023-6066 checkmarx 2 IOCs
  • PyPI
    py-hackednvidialib all versions
    MAL-2023-5159 checkmarx 2 IOCs
  • PyPI
    libvirtuallgtbrand all versions
    MAL-2023-4625 checkmarx 2 IOCs
  • PyPI
    libstringpaypalrand all versions
    MAL-2023-4512 checkmarx 2 IOCs
  • PyPI
    libhackedguiver all versions
    MAL-2023-4055 checkmarx 2 IOCs
  • PyPI
    esqregrandinfo all versions
    MAL-2023-3359 checkmarx 2 IOCs
  • PyPI
    tpgetultrapaypal all versions
    MAL-2023-7056 checkmarx 2 IOCs
  • PyPI
    selfosintstrpong all versions
    MAL-2023-6376 checkmarx 2 IOCs
  • PyPI
    py-nvidialibhttp all versions
    MAL-2023-5364 checkmarx 2 IOCs
  • PyPI
    py-hydrapipre all versions
    MAL-2023-5200 checkmarx 2 IOCs
  • PyPI
    libvirtualpystr all versions
    MAL-2023-4633 checkmarx 2 IOCs
  • PyPI
    esqrandomurlhydra all versions
    MAL-2023-3348 checkmarx 2 IOCs
  • PyPI
    esqcpuverre all versions
    MAL-2023-2800 checkmarx 2 IOCs
  • PyPI
    tpmineedcv all versions
    MAL-2023-7273 checkmarx 2 IOCs
  • PyPI
    selfpippaypalpyw all versions
    MAL-2023-6446 checkmarx 2 IOCs
  • PyPI
    py-encodepushhydra all versions
    MAL-2023-5096 checkmarx 2 IOCs
  • PyPI
    esqpingcraftad all versions
    MAL-2023-3194 checkmarx 2 IOCs
  • PyPI
    esqgetinfoping all versions
    MAL-2023-2892 checkmarx 2 IOCs
  • PyPI
    esqcpucontrolmine all versions
    MAL-2023-2788 checkmarx 2 IOCs
  • PyPI
    tpultravmvirtual all versions
    MAL-2023-7679 checkmarx 2 IOCs
  • PyPI
    selfloadcontrolstr all versions
    MAL-2023-6284 checkmarx 2 IOCs
  • PyPI
    py-randompyrandom all versions
    MAL-2023-5578 checkmarx 2 IOCs
  • PyPI
    esqgamemineping all versions
    MAL-2023-2878 checkmarx 2 IOCs
  • PyPI
    esqcandypyvisa all versions
    MAL-2023-2749 checkmarx 2 IOCs
  • PyPI
    tppypingvm all versions
    MAL-2023-7471 checkmarx 2 IOCs
  • PyPI
    selfrandompiposint all versions
    MAL-2023-6576 checkmarx 2 IOCs
  • PyPI
    py-stringrandkill all versions
    MAL-2023-5637 checkmarx 2 IOCs
  • PyPI
    py-pyintelcpu all versions
    MAL-2023-5524 checkmarx 2 IOCs
  • PyPI
    libpostmcstudy all versions
    MAL-2023-4355 checkmarx 2 IOCs
  • PyPI
    tpmineintgame all versions
    MAL-2023-7279 checkmarx 2 IOCs
  • PyPI
    py-pywsuperre all versions
    MAL-2023-5542 checkmarx 2 IOCs
  • PyPI
    esqvisavirtualencode all versions
    MAL-2023-3556 checkmarx 2 IOCs
  • PyPI
    esqhackedcvpull all versions
    MAL-2023-2939 checkmarx 2 IOCs
  • PyPI
    esqadrandomver all versions
    MAL-2023-2738 checkmarx 2 IOCs
  • PyPI
    tpverencodeinfo all versions
    MAL-2023-7695 checkmarx 2 IOCs
  • PyPI
    tplgtbreosint all versions
    MAL-2023-7206 checkmarx 2 IOCs
  • PyPI
    tpedhydrapush all versions
    MAL-2023-6999 checkmarx 2 IOCs
  • PyPI
    libmaskramcv all versions
    MAL-2023-4214 checkmarx 2 IOCs
  • PyPI
    librandstrgui all versions
    MAL-2023-4466 checkmarx 2 IOCs