Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,169 npm 223,992 PyPI 12,027 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,027 reports · Feed

  • PyPI
    selfrandomcraftpong all versions
    MAL-2023-6568 checkmarx 2 IOCs
  • PyPI
    selframrandommask all versions
    MAL-2023-6560 checkmarx 2 IOCs
  • PyPI
    selfproofcvrand all versions
    MAL-2023-6484 checkmarx 2 IOCs
  • PyPI
    selfcraftpaypalultra all versions
    MAL-2023-6005 checkmarx 2 IOCs
  • PyPI
    py-proofrandreplace all versions
    MAL-2023-5492 checkmarx 2 IOCs
  • PyPI
    librandloadad all versions
    MAL-2023-4446 checkmarx 2 IOCs
  • PyPI
    libadproofver all versions
    MAL-2023-3865 checkmarx 2 IOCs
  • PyPI
    esqpaypallgtbint all versions
    MAL-2023-3168 checkmarx 2 IOCs
  • PyPI
    esqloadrandsplit all versions
    MAL-2023-3071 checkmarx 2 IOCs
  • PyPI
    tpverguipost all versions
    MAL-2023-7696 checkmarx 2 IOCs
  • PyPI
    tprepullpush all versions
    MAL-2023-7569 checkmarx 2 IOCs
  • PyPI
    tppullprooflib all versions
    MAL-2023-7431 checkmarx 2 IOCs
  • PyPI
    selfsuperaded all versions
    MAL-2023-6670 checkmarx 2 IOCs
  • PyPI
    selfmcosintrandom all versions
    MAL-2023-6325 checkmarx 2 IOCs
  • PyPI
    py-pullhackedurl all versions
    MAL-2023-5501 checkmarx 2 IOCs
  • PyPI
    py-intintelhttp all versions
    MAL-2023-5243 checkmarx 2 IOCs
  • PyPI
    esqminepullnvidia all versions
    MAL-2023-3124 checkmarx 2 IOCs
  • PyPI
    esqhydracvpost all versions
    MAL-2023-2965 checkmarx 2 IOCs
  • PyPI
    esqencodemineinfo all versions
    MAL-2023-2858 checkmarx 2 IOCs
  • PyPI
    tpresuperrand all versions
    MAL-2023-7576 checkmarx 2 IOCs
  • PyPI
    tpramvisapush all versions
    MAL-2023-7514 checkmarx 2 IOCs
  • PyPI
    tpkillhydraed all versions
    MAL-2023-7184 checkmarx 2 IOCs
  • PyPI
    py-masknvidiagui all versions
    MAL-2023-5323 checkmarx 2 IOCs
  • PyPI
    liburlstrstring all versions
    MAL-2023-4597 checkmarx 2 IOCs
  • PyPI
    librecontrolhacked all versions
    MAL-2023-4469 checkmarx 2 IOCs
  • PyPI
    libencodeultrainfo all versions
    MAL-2023-3988 checkmarx 2 IOCs
  • PyPI
    tplibcpuvm all versions
    MAL-2023-7207 checkmarx 2 IOCs
  • PyPI
    tpinfominegui all versions
    MAL-2023-7138 checkmarx 2 IOCs
  • PyPI
    tpgamehydravm all versions
    MAL-2023-7031 checkmarx 2 IOCs
  • PyPI
    py-libguihacked all versions
    MAL-2023-5287 checkmarx 2 IOCs
  • PyPI
    py-cvposthydra all versions
    MAL-2023-5072 checkmarx 2 IOCs
  • PyPI
    libultrapycandy all versions
    MAL-2023-4579 checkmarx 2 IOCs
  • PyPI
    libgrandcpulib all versions
    MAL-2023-4015 checkmarx 2 IOCs
  • PyPI
    esqcpupullad all versions
    MAL-2023-2795 checkmarx 2 IOCs
  • PyPI
    tpstudypingrand all versions
    MAL-2023-7638 checkmarx 2 IOCs
  • PyPI
    selfhackedcpuvirtual all versions
    MAL-2023-6143 checkmarx 2 IOCs
  • PyPI
    py-candymaskreplace all versions
    MAL-2023-5009 checkmarx 2 IOCs
  • PyPI
    libcontrolultrakill all versions
    MAL-2023-3919 checkmarx 2 IOCs
  • PyPI
    esqencodeadping all versions
    MAL-2023-2852 checkmarx 2 IOCs
  • PyPI
    tpcvadgrand all versions
    MAL-2023-6981 checkmarx 2 IOCs