Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,169 npm 223,992 PyPI 12,027 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,027 reports · Feed

  • PyPI
    esqgrandvirtualget all versions
    MAL-2023-2922 checkmarx 2 IOCs
  • PyPI
    tpretoolvirtual all versions
    MAL-2023-7578 checkmarx 2 IOCs
  • PyPI
    tpkillcandykill all versions
    MAL-2023-7180 checkmarx 2 IOCs
  • PyPI
    tpgrandlibload all versions
    MAL-2023-7063 checkmarx 2 IOCs
  • PyPI
    selfgrandstrpyw all versions
    MAL-2023-6123 checkmarx 2 IOCs
  • PyPI
    liblibpostcc all versions
    MAL-2023-4186 checkmarx 2 IOCs
  • PyPI
    tpmasklibsplit all versions
    MAL-2023-7242 checkmarx 2 IOCs
  • PyPI
    selfvirtualloadrand all versions
    MAL-2023-6761 checkmarx 2 IOCs
  • PyPI
    libponggetpaypal all versions
    MAL-2023-4332 checkmarx 2 IOCs
  • PyPI
    selfpostponghydra all versions
    MAL-2023-6476 checkmarx 2 IOCs
  • PyPI
    py-paypalpongosint all versions
    MAL-2023-5400 checkmarx 2 IOCs
  • PyPI
    tpstrintelurl all versions
    MAL-2023-7618 checkmarx 2 IOCs
  • PyPI
    selfkillgameintel all versions
    MAL-2023-6244 checkmarx 2 IOCs
  • PyPI
    py-visatoolstring all versions
    MAL-2023-5772 checkmarx 2 IOCs
  • PyPI
    esqgetultragui all versions
    MAL-2023-2904 checkmarx 2 IOCs
  • PyPI
    selfpywkillgui all versions
    MAL-2023-6540 checkmarx 2 IOCs
  • PyPI
    tpmaskpaypalping all versions
    MAL-2023-7245 checkmarx 2 IOCs
  • PyPI
    py-pongedgame all versions
    MAL-2023-5453 checkmarx 2 IOCs
  • PyPI
    libpipkillre all versions
    MAL-2023-4325 checkmarx 2 IOCs
  • PyPI
    tpmcverhacked all versions
    MAL-2023-7267 checkmarx 2 IOCs
  • PyPI
    tphackedcraftnvidia all versions
    MAL-2023-7091 checkmarx 2 IOCs
  • PyPI
    selfstudycontrolpush all versions
    MAL-2023-6658 checkmarx 2 IOCs
  • PyPI
    selframintelosint all versions
    MAL-2023-6555 checkmarx 2 IOCs
  • PyPI
    selfednvidiatool all versions
    MAL-2023-6038 checkmarx 2 IOCs
  • PyPI
    selfcpuintsplit all versions
    MAL-2023-5989 checkmarx 2 IOCs
  • PyPI
    py-pepnvidiastr all versions
    MAL-2023-5417 checkmarx 2 IOCs
  • PyPI
    py-candyhydrapep all versions
    MAL-2023-5005 checkmarx 2 IOCs
  • PyPI
    esqrepymc all versions
    MAL-2023-3380 checkmarx 2 IOCs
  • PyPI
    esqrandpippush all versions
    MAL-2023-3349 checkmarx 2 IOCs
  • PyPI
    tprandpushvirtual all versions
    MAL-2023-7535 checkmarx 2 IOCs
  • PyPI
    tpmcrandgrand all versions
    MAL-2023-7264 checkmarx 2 IOCs
  • PyPI
    selfultrainfocraft all versions
    MAL-2023-6705 checkmarx 2 IOCs
  • PyPI
    selfpeppippull all versions
    MAL-2023-6411 checkmarx 2 IOCs
  • PyPI
    selfadpullint all versions
    MAL-2023-5942 checkmarx 2 IOCs
  • PyPI
    py-libhttpreplace all versions
    MAL-2023-5289 checkmarx 2 IOCs
  • PyPI
    py-edpushinfo all versions
    MAL-2023-5087 checkmarx 2 IOCs
  • PyPI
    libstudyencodepaypal all versions
    MAL-2023-4531 checkmarx 2 IOCs
  • PyPI
    libcraftsuperre all versions
    MAL-2023-3951 checkmarx 2 IOCs
  • PyPI
    tppeppingram all versions
    MAL-2023-7336 checkmarx 2 IOCs
  • PyPI
    selfsplitreplacecraft all versions
    MAL-2023-6625 checkmarx 2 IOCs