Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,169 npm 223,992 PyPI 12,027 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,027 reports · Feed

  • PyPI
    tpintelramhacked all versions
    MAL-2023-7164 checkmarx 2 IOCs
  • PyPI
    py-proofrandvisa all versions
    MAL-2023-5493 checkmarx 2 IOCs
  • PyPI
    librandstringpull all versions
    MAL-2023-4467 checkmarx 2 IOCs
  • PyPI
    esqrandomreplacecc all versions
    MAL-2023-3346 checkmarx 2 IOCs
  • PyPI
    tppyhttprand all versions
    MAL-2023-7459 checkmarx 2 IOCs
  • PyPI
    py-pushpullsuper all versions
    MAL-2023-5519 checkmarx 2 IOCs
  • PyPI
    libpipcontrolcandy all versions
    MAL-2023-4322 checkmarx 2 IOCs
  • PyPI
    esqmineosintpip all versions
    MAL-2023-3123 checkmarx 2 IOCs
  • PyPI
    py-superrecc all versions
    MAL-2023-5685 checkmarx 2 IOCs
  • PyPI
    esqpywpepcraft all versions
    MAL-2023-3309 checkmarx 2 IOCs
  • PyPI
    selfurlminecontrol all versions
    MAL-2023-6726 checkmarx 2 IOCs
  • PyPI
    selfcpuintelpip all versions
    MAL-2023-5987 checkmarx 2 IOCs
  • PyPI
    esqstrpushgrand all versions
    MAL-2023-3441 checkmarx 2 IOCs
  • PyPI
    libmasklibosint all versions
    MAL-2023-4209 checkmarx 2 IOCs
  • PyPI
    tpcpuramhttp all versions
    MAL-2023-6969 checkmarx 2 IOCs
  • PyPI
    selfminemasked all versions
    MAL-2023-6340 checkmarx 2 IOCs
  • PyPI
    libpushmasklgtb all versions
    MAL-2023-4398 checkmarx 2 IOCs
  • PyPI
    selfpongencodeintel all versions
    MAL-2023-6457 checkmarx 2 IOCs
  • PyPI
    py-candynvidiakill all versions
    MAL-2023-5010 checkmarx 2 IOCs
  • PyPI
    tposinthackedstring all versions
    MAL-2023-7308 checkmarx 2 IOCs
  • PyPI
    tpcpustrvm all versions
    MAL-2023-6970 checkmarx 2 IOCs
  • PyPI
    selfverccint all versions
    MAL-2023-6732 checkmarx 2 IOCs
  • PyPI
    tpsplitpushpush all versions
    MAL-2023-7591 checkmarx 2 IOCs
  • PyPI
    tpinforandcpu all versions
    MAL-2023-7142 checkmarx 2 IOCs
  • PyPI
    selfpippongpip all versions
    MAL-2023-6447 checkmarx 2 IOCs
  • PyPI
    py-verreplacesplit all versions
    MAL-2023-5741 checkmarx 2 IOCs
  • PyPI
    py-hydracontrolget all versions
    MAL-2023-5193 checkmarx 2 IOCs
  • PyPI
    esqintstringcraft all versions
    MAL-2023-3017 checkmarx 2 IOCs
  • PyPI
    tpintgrandre all versions
    MAL-2023-7170 checkmarx 2 IOCs
  • PyPI
    tpgetadstr all versions
    MAL-2023-7044 checkmarx 2 IOCs
  • PyPI
    selfosintsplithydra all versions
    MAL-2023-6374 checkmarx 2 IOCs
  • PyPI
    py-osintvirtualload all versions
    MAL-2023-5389 checkmarx 2 IOCs
  • PyPI
    py-cpupipgame all versions
    MAL-2023-5050 checkmarx 2 IOCs
  • PyPI
    libverpullpong all versions
    MAL-2023-4614 checkmarx 2 IOCs
  • PyPI
    esqvirtualkillsuper all versions
    MAL-2023-3534 checkmarx 2 IOCs
  • PyPI
    tphttplgtbrandom all versions
    MAL-2023-7113 checkmarx 2 IOCs
  • PyPI
    tpccguipip all versions
    MAL-2023-6933 checkmarx 2 IOCs
  • PyPI
    selfintelpullpost all versions
    MAL-2023-6224 checkmarx 2 IOCs
  • PyPI
    py-piposintpaypal all versions
    MAL-2023-5443 checkmarx 2 IOCs
  • PyPI
    py-libloadcandy all versions
    MAL-2023-5291 checkmarx 2 IOCs