Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,169 npm 223,992 PyPI 12,027 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,027 reports · Feed

  • PyPI
    esqcontrolhttphttp all versions
    MAL-2023-2778 checkmarx 2 IOCs
  • PyPI
    selfintpushhacked all versions
    MAL-2023-6232 checkmarx 2 IOCs
  • PyPI
    py-hydrasupernvidia all versions
    MAL-2023-5204 checkmarx 2 IOCs
  • PyPI
    esqurlosinthydra all versions
    MAL-2023-3508 checkmarx 2 IOCs
  • PyPI
    tpcvnvidiasuper all versions
    MAL-2023-6990 checkmarx 2 IOCs
  • PyPI
    selfrekillrand all versions
    MAL-2023-6595 checkmarx 2 IOCs
  • PyPI
    libsuperproofint all versions
    MAL-2023-4554 checkmarx 2 IOCs
  • PyPI
    tppipcraftad all versions
    MAL-2023-7358 checkmarx 2 IOCs
  • PyPI
    selfsuperstrpaypal all versions
    MAL-2023-6680 checkmarx 2 IOCs
  • PyPI
    selfsuperedping all versions
    MAL-2023-6673 checkmarx 2 IOCs
  • PyPI
    tpcandyminead all versions
    MAL-2023-6928 checkmarx 2 IOCs
  • PyPI
    selfgetminecandy all versions
    MAL-2023-6097 checkmarx 2 IOCs
  • PyPI
    libloadhackedpyw all versions
    MAL-2023-4194 checkmarx 2 IOCs
  • PyPI
    esqloadencodeosint all versions
    MAL-2023-3067 checkmarx 2 IOCs
  • PyPI
    py-postultrahacked all versions
    MAL-2023-5478 checkmarx 2 IOCs
  • PyPI
    tppywpaypalgui all versions
    MAL-2023-7489 checkmarx 2 IOCs
  • PyPI
    tposinthydrapip all versions
    MAL-2023-7310 checkmarx 2 IOCs
  • PyPI
    selfvmintproof all versions
    MAL-2023-6794 checkmarx 2 IOCs
  • PyPI
    selfpostramurl all versions
    MAL-2023-6479 checkmarx 2 IOCs
  • PyPI
    selfurlmcstr all versions
    MAL-2023-6725 checkmarx 2 IOCs
  • PyPI
    selfmaskpaypalpip all versions
    MAL-2023-6309 checkmarx 2 IOCs
  • PyPI
    libsuperregrand all versions
    MAL-2023-4556 checkmarx 2 IOCs
  • PyPI
    libnvidiamcad all versions
    MAL-2023-4255 checkmarx 2 IOCs
  • PyPI
    esqedstudynvidia all versions
    MAL-2023-2849 checkmarx 2 IOCs
  • PyPI
    selfsupertoolcontrol all versions
    MAL-2023-6682 checkmarx 2 IOCs
  • PyPI
    tppyencodepull all versions
    MAL-2023-7456 checkmarx 2 IOCs
  • PyPI
    tpintelpepcraft all versions
    MAL-2023-7161 checkmarx 2 IOCs
  • PyPI
    py-randomlibpong all versions
    MAL-2023-5573 checkmarx 2 IOCs
  • PyPI
    libpaypalhackedlgtb all versions
    MAL-2023-4282 checkmarx 2 IOCs
  • PyPI
    esqgrandhttpreplace all versions
    MAL-2023-2911 checkmarx 2 IOCs
  • PyPI
    tpvmstringgrand all versions
    MAL-2023-7744 checkmarx 2 IOCs
  • PyPI
    tpmaskencodehacked all versions
    MAL-2023-7240 checkmarx 2 IOCs
  • PyPI
    tpkillkillsplit all versions
    MAL-2023-7185 checkmarx 2 IOCs
  • PyPI
    selfmaskintelpong all versions
    MAL-2023-6306 checkmarx 2 IOCs
  • PyPI
    py-ultracpustudy all versions
    MAL-2023-5704 checkmarx 2 IOCs
  • PyPI
    py-maskprooftool all versions
    MAL-2023-5325 checkmarx 2 IOCs
  • PyPI
    libcontrolpyinfo all versions
    MAL-2023-3912 checkmarx 2 IOCs
  • PyPI
    esqstrvirtualget all versions
    MAL-2023-3446 checkmarx 2 IOCs
  • PyPI
    esqinfocctool all versions
    MAL-2023-2974 checkmarx 2 IOCs
  • PyPI
    tpguiccpyw all versions
    MAL-2023-7073 checkmarx 2 IOCs