Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,169 npm 223,992 PyPI 12,027 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,027 reports · Feed

  • PyPI
    py-cpuintre all versions
    MAL-2023-5045 checkmarx 2 IOCs
  • PyPI
    librehackedpull all versions
    MAL-2023-4472 checkmarx 2 IOCs
  • PyPI
    libintelpostlib all versions
    MAL-2023-4120 checkmarx 2 IOCs
  • PyPI
    libedgetstudy all versions
    MAL-2023-3968 checkmarx 2 IOCs
  • PyPI
    esqnvidiavmget all versions
    MAL-2023-3145 checkmarx 2 IOCs
  • PyPI
    tphydracvmask all versions
    MAL-2023-7120 checkmarx 2 IOCs
  • PyPI
    tpcraftvisasuper all versions
    MAL-2023-6980 checkmarx 2 IOCs
  • PyPI
    selfreplaceencodepush all versions
    MAL-2023-6601 checkmarx 2 IOCs
  • PyPI
    selfintmaskreplace all versions
    MAL-2023-6228 checkmarx 2 IOCs
  • PyPI
    py-httpgrandpong all versions
    MAL-2023-5176 checkmarx 2 IOCs
  • PyPI
    libgrandrandomintel all versions
    MAL-2023-4027 checkmarx 2 IOCs
  • PyPI
    libadtoolmc all versions
    MAL-2023-3869 checkmarx 2 IOCs
  • PyPI
    tpcvverencode all versions
    MAL-2023-6997 checkmarx 2 IOCs
  • PyPI
    py-pingvisarandom all versions
    MAL-2023-5440 checkmarx 2 IOCs
  • PyPI
    libpostpongmc all versions
    MAL-2023-4359 checkmarx 2 IOCs
  • PyPI
    tphttppullload all versions
    MAL-2023-7115 checkmarx 2 IOCs
  • PyPI
    selfpullcchydra all versions
    MAL-2023-6501 checkmarx 2 IOCs
  • PyPI
    py-revisaram all versions
    MAL-2023-5618 checkmarx 2 IOCs
  • PyPI
    py-getcvad all versions
    MAL-2023-5120 checkmarx 2 IOCs
  • PyPI
    libvisasupergrand all versions
    MAL-2023-4651 checkmarx 2 IOCs
  • PyPI
    libpyhttplgtb all versions
    MAL-2023-4411 checkmarx 2 IOCs
  • PyPI
    esqpostloadping all versions
    MAL-2023-3234 checkmarx 2 IOCs
  • PyPI
    py-strpongint all versions
    MAL-2023-5650 checkmarx 2 IOCs
  • PyPI
    esqvisastudynvidia all versions
    MAL-2023-3553 checkmarx 2 IOCs
  • PyPI
    selfosintpywmask all versions
    MAL-2023-6371 checkmarx 2 IOCs
  • PyPI
    selflgtbpostrand all versions
    MAL-2023-6264 checkmarx 2 IOCs
  • PyPI
    py-hackedpushtool all versions
    MAL-2023-5165 checkmarx 2 IOCs
  • PyPI
    tpedpingpull all versions
    MAL-2023-7004 checkmarx 2 IOCs
  • PyPI
    esqstringpingcraft all versions
    MAL-2023-3423 checkmarx 2 IOCs
  • PyPI
    tpvirtualcontrolmc all versions
    MAL-2023-7705 checkmarx 2 IOCs
  • PyPI
    selfpywpushhacked all versions
    MAL-2023-6547 checkmarx 2 IOCs
  • PyPI
    esqpostpongstr all versions
    MAL-2023-3238 checkmarx 2 IOCs
  • PyPI
    esqcpugrandpong all versions
    MAL-2023-2792 checkmarx 2 IOCs
  • PyPI
    tposintpywcraft all versions
    MAL-2023-7315 checkmarx 2 IOCs
  • PyPI
    tpguiintelget all versions
    MAL-2023-7083 checkmarx 2 IOCs
  • PyPI
    libpongkillad all versions
    MAL-2023-4334 checkmarx 2 IOCs
  • PyPI
    esqcraftguicc all versions
    MAL-2023-2804 checkmarx 2 IOCs
  • PyPI
    tpstringlgtbintel all versions
    MAL-2023-7608 checkmarx 2 IOCs
  • PyPI
    py-strlgtbstring all versions
    MAL-2023-5643 checkmarx 2 IOCs
  • PyPI
    liburlpywpost all versions
    MAL-2023-4593 checkmarx 2 IOCs