Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,169 npm 223,992 PyPI 12,027 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,027 reports · Feed

  • PyPI
    esqproofpostpull all versions
    MAL-2023-3250 checkmarx 2 IOCs
  • PyPI
    tpsplitrandcv all versions
    MAL-2023-7594 checkmarx 2 IOCs
  • PyPI
    tppywrandompull all versions
    MAL-2023-7494 checkmarx 2 IOCs
  • PyPI
    tppyintgame all versions
    MAL-2023-7464 checkmarx 2 IOCs
  • PyPI
    tppingvercv all versions
    MAL-2023-7356 checkmarx 2 IOCs
  • PyPI
    selfedrerand all versions
    MAL-2023-6042 checkmarx 2 IOCs
  • PyPI
    py-studynvidiamc all versions
    MAL-2023-5668 checkmarx 2 IOCs
  • PyPI
    py-hydralgtbvm all versions
    MAL-2023-5197 checkmarx 2 IOCs
  • PyPI
    liblgtbkillhacked all versions
    MAL-2023-4161 checkmarx 2 IOCs
  • PyPI
    esqstringgamere all versions
    MAL-2023-3413 checkmarx 2 IOCs
  • PyPI
    esqmaskintlib all versions
    MAL-2023-3083 checkmarx 2 IOCs
  • PyPI
    esqcandysplitpep all versions
    MAL-2023-2751 checkmarx 2 IOCs
  • PyPI
    tppullpyad all versions
    MAL-2023-7436 checkmarx 2 IOCs
  • PyPI
    tpccintelcontrol all versions
    MAL-2023-6934 checkmarx 2 IOCs
  • PyPI
    selfrandomintosint all versions
    MAL-2023-6573 checkmarx 2 IOCs
  • PyPI
    selfnvidiaccpong all versions
    MAL-2023-6349 checkmarx 2 IOCs
  • PyPI
    py-studytoolping all versions
    MAL-2023-5676 checkmarx 2 IOCs
  • PyPI
    py-replacecraftad all versions
    MAL-2023-5598 checkmarx 2 IOCs
  • PyPI
    py-controlgrandlib all versions
    MAL-2023-5029 checkmarx 2 IOCs
  • PyPI
    libvercpuvm all versions
    MAL-2023-4602 checkmarx 2 IOCs
  • PyPI
    libpeppipintel all versions
    MAL-2023-4298 checkmarx 2 IOCs
  • PyPI
    tprandrehttp all versions
    MAL-2023-7537 checkmarx 2 IOCs
  • PyPI
    tpramosintpost all versions
    MAL-2023-7506 checkmarx 2 IOCs
  • PyPI
    selfpingultragame all versions
    MAL-2023-6435 checkmarx 2 IOCs
  • PyPI
    selfpingponggame all versions
    MAL-2023-6429 checkmarx 2 IOCs
  • PyPI
    py-pipsuperad all versions
    MAL-2023-5449 checkmarx 2 IOCs
  • PyPI
    libpullvisapy all versions
    MAL-2023-4389 checkmarx 2 IOCs
  • PyPI
    tpramtoolpong all versions
    MAL-2023-7510 checkmarx 2 IOCs
  • PyPI
    selfultraintelvisa all versions
    MAL-2023-6706 checkmarx 2 IOCs
  • PyPI
    selflgtbcontrolpyw all versions
    MAL-2023-6256 checkmarx 2 IOCs
  • PyPI
    py-pingedpyw all versions
    MAL-2023-5428 checkmarx 2 IOCs
  • PyPI
    libhackedloadtool all versions
    MAL-2023-4059 checkmarx 2 IOCs
  • PyPI
    esqproofvisacandy all versions
    MAL-2023-3258 checkmarx 2 IOCs
  • PyPI
    esqccstudyhacked all versions
    MAL-2023-2771 checkmarx 2 IOCs
  • PyPI
    tpcontrolpywreplace all versions
    MAL-2023-6953 checkmarx 2 IOCs
  • PyPI
    selfvisarandompush all versions
    MAL-2023-6781 checkmarx 2 IOCs
  • PyPI
    selfhackedrandvirtual all versions
    MAL-2023-6158 checkmarx 2 IOCs
  • PyPI
    py-pipcandylgtb all versions
    MAL-2023-5441 checkmarx 2 IOCs
  • PyPI
    esqmaskintnvidia all versions
    MAL-2023-3084 checkmarx 2 IOCs
  • PyPI
    tpreurlultra all versions
    MAL-2023-7579 checkmarx 2 IOCs