Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,169 npm 223,992 PyPI 12,027 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,027 reports · Feed

  • PyPI
    librandlgtbultra all versions
    MAL-2023-4445 checkmarx 2 IOCs
  • PyPI
    tppippushvm all versions
    MAL-2023-7369 checkmarx 2 IOCs
  • PyPI
    libvirtualcandyint all versions
    MAL-2023-4619 checkmarx 2 IOCs
  • PyPI
    libpycccv all versions
    MAL-2023-4408 checkmarx 2 IOCs
  • PyPI
    librandomintelkill all versions
    MAL-2023-4459 checkmarx 2 IOCs
  • PyPI
    libmccraftpush all versions
    MAL-2023-4224 checkmarx 2 IOCs
  • PyPI
    esqrekillintel all versions
    MAL-2023-3363 checkmarx 2 IOCs
  • PyPI
    esqponghydrastring all versions
    MAL-2023-3215 checkmarx 2 IOCs
  • PyPI
    selftoolpyint all versions
    MAL-2023-6695 checkmarx 2 IOCs
  • PyPI
    liburlstringping all versions
    MAL-2023-4596 checkmarx 2 IOCs
  • PyPI
    libpingverrand all versions
    MAL-2023-4318 checkmarx 2 IOCs
  • PyPI
    selfrandloadcv all versions
    MAL-2023-6566 checkmarx 2 IOCs
  • PyPI
    esqveradvirtual all versions
    MAL-2023-3512 checkmarx 2 IOCs
  • PyPI
    selfurlrandomver all versions
    MAL-2023-6729 checkmarx 2 IOCs
  • PyPI
    selftoolinfover all versions
    MAL-2023-6689 checkmarx 2 IOCs
  • PyPI
    py-replaceultragrand all versions
    MAL-2023-5609 checkmarx 2 IOCs
  • PyPI
    libcandyadhydra all versions
    MAL-2023-3873 checkmarx 2 IOCs
  • PyPI
    tpstringhackedstudy all versions
    MAL-2023-7605 checkmarx 2 IOCs
  • PyPI
    tplibpullpyw all versions
    MAL-2023-7212 checkmarx 2 IOCs
  • PyPI
    libtoolrandomrand all versions
    MAL-2023-4569 checkmarx 2 IOCs
  • PyPI
    libnvidiasplitpep all versions
    MAL-2023-4262 checkmarx 2 IOCs
  • PyPI
    esqpullhackedstudy all versions
    MAL-2023-3262 checkmarx 2 IOCs
  • PyPI
    esqnvidiaultrapep all versions
    MAL-2023-3143 checkmarx 2 IOCs
  • PyPI
    tpsplitpostpong all versions
    MAL-2023-7590 checkmarx 2 IOCs
  • PyPI
    tprandstringpep all versions
    MAL-2023-7538 checkmarx 2 IOCs
  • PyPI
    tpproofpinglib all versions
    MAL-2023-7408 checkmarx 2 IOCs
  • PyPI
    tpproofgameed all versions
    MAL-2023-7405 checkmarx 2 IOCs
  • PyPI
    tphttpsuperpep all versions
    MAL-2023-7118 checkmarx 2 IOCs
  • PyPI
    selfverpushget all versions
    MAL-2023-6748 checkmarx 2 IOCs
  • PyPI
    py-virtualhttppy all versions
    MAL-2023-5751 checkmarx 2 IOCs
  • PyPI
    py-pywvisakill all versions
    MAL-2023-5544 checkmarx 2 IOCs
  • PyPI
    libreplaceultraintel all versions
    MAL-2023-4486 checkmarx 2 IOCs
  • PyPI
    selfrandcraftreplace all versions
    MAL-2023-6564 checkmarx 2 IOCs
  • PyPI
    py-virtualcontrolgame all versions
    MAL-2023-5745 checkmarx 2 IOCs
  • PyPI
    py-studyvmpyw all versions
    MAL-2023-5678 checkmarx 2 IOCs
  • PyPI
    py-minemaskget all versions
    MAL-2023-5349 checkmarx 2 IOCs
  • PyPI
    py-httphttpultra all versions
    MAL-2023-5177 checkmarx 2 IOCs
  • PyPI
    libstrcraftint all versions
    MAL-2023-4505 checkmarx 2 IOCs
  • PyPI
    libencodepypost all versions
    MAL-2023-3983 checkmarx 2 IOCs
  • PyPI
    esqstringminecv all versions
    MAL-2023-3418 checkmarx 2 IOCs