Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,169 npm 223,992 PyPI 12,027 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,027 reports · Feed

  • PyPI
    libhttppostcraft all versions
    MAL-2023-4077 checkmarx 2 IOCs
  • PyPI
    libgetmccv all versions
    MAL-2023-4003 checkmarx 2 IOCs
  • PyPI
    tpnvidiaintelpush all versions
    MAL-2023-7293 checkmarx 2 IOCs
  • PyPI
    esqlibpepgrand all versions
    MAL-2023-3055 checkmarx 2 IOCs
  • PyPI
    esqsplitpepcandy all versions
    MAL-2023-3398 checkmarx 2 IOCs
  • PyPI
    esqnvidiareosint all versions
    MAL-2023-3140 checkmarx 2 IOCs
  • PyPI
    tphackedintelhydra all versions
    MAL-2023-7100 checkmarx 2 IOCs
  • PyPI
    selfvergetcc all versions
    MAL-2023-6735 checkmarx 2 IOCs
  • PyPI
    selfproofkillcraft all versions
    MAL-2023-6489 checkmarx 2 IOCs
  • PyPI
    py-visarandomad all versions
    MAL-2023-5770 checkmarx 2 IOCs
  • PyPI
    py-randvirtualinfo all versions
    MAL-2023-5587 checkmarx 2 IOCs
  • PyPI
    py-intnvidiagui all versions
    MAL-2023-5245 checkmarx 2 IOCs
  • PyPI
    libmaskvirtualpyw all versions
    MAL-2023-4221 checkmarx 2 IOCs
  • PyPI
    esqpongpongad all versions
    MAL-2023-3221 checkmarx 2 IOCs
  • PyPI
    esqpongpingload all versions
    MAL-2023-3220 checkmarx 2 IOCs
  • PyPI
    tpsplitloadhydra all versions
    MAL-2023-7586 checkmarx 2 IOCs
  • PyPI
    tpramhttpurl all versions
    MAL-2023-7503 checkmarx 2 IOCs
  • PyPI
    tploadsplithacked all versions
    MAL-2023-7238 checkmarx 2 IOCs
  • PyPI
    tplibhydrainfo all versions
    MAL-2023-7209 checkmarx 2 IOCs
  • PyPI
    tpedramver all versions
    MAL-2023-7006 checkmarx 2 IOCs
  • PyPI
    selfosintultrahacked all versions
    MAL-2023-6379 checkmarx 2 IOCs
  • PyPI
    py-intverpyw all versions
    MAL-2023-5253 checkmarx 2 IOCs
  • PyPI
    py-httpvisagui all versions
    MAL-2023-5190 checkmarx 2 IOCs
  • PyPI
    libhydravmram all versions
    MAL-2023-4094 checkmarx 2 IOCs
  • PyPI
    libcpugamecc all versions
    MAL-2023-3926 checkmarx 2 IOCs
  • PyPI
    esqrandompingad all versions
    MAL-2023-3342 checkmarx 2 IOCs
  • PyPI
    esqloadpippost all versions
    MAL-2023-3070 checkmarx 2 IOCs
  • PyPI
    selfpyosintmine all versions
    MAL-2023-6527 checkmarx 2 IOCs
  • PyPI
    py-hackedpongcraft all versions
    MAL-2023-5162 checkmarx 2 IOCs
  • PyPI
    py-adintelint all versions
    MAL-2023-4988 checkmarx 2 IOCs
  • PyPI
    libverreplacestr all versions
    MAL-2023-4616 checkmarx 2 IOCs
  • PyPI
    esqhttpstringurl all versions
    MAL-2023-2960 checkmarx 2 IOCs
  • PyPI
    selfintvmcontrol all versions
    MAL-2023-6240 checkmarx 2 IOCs
  • PyPI
    py-pingencodeencode all versions
    MAL-2023-5429 checkmarx 2 IOCs
  • PyPI
    librandintelget all versions
    MAL-2023-4444 checkmarx 2 IOCs
  • PyPI
    libpystudyre all versions
    MAL-2023-4415 checkmarx 2 IOCs
  • PyPI
    libpulledping all versions
    MAL-2023-4378 checkmarx 2 IOCs
  • PyPI
    libloadramstring all versions
    MAL-2023-4200 checkmarx 2 IOCs
  • PyPI
    esqcraftremc all versions
    MAL-2023-2814 checkmarx 2 IOCs
  • PyPI
    tpminemaskpip all versions
    MAL-2023-7282 checkmarx 2 IOCs