Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,169 npm 223,992 PyPI 12,027 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,027 reports · Feed

  • PyPI
    selfstringguiram all versions
    MAL-2023-6634 checkmarx 2 IOCs
  • PyPI
    py-killmineencode all versions
    MAL-2023-5263 checkmarx 2 IOCs
  • PyPI
    esqpywintelgrand all versions
    MAL-2023-3303 checkmarx 2 IOCs
  • PyPI
    tpsupercraftmc all versions
    MAL-2023-7645 checkmarx 2 IOCs
  • PyPI
    selfencodeencodevirtual all versions
    MAL-2023-6046 checkmarx 2 IOCs
  • PyPI
    py-toolvisavisa all versions
    MAL-2023-5701 checkmarx 2 IOCs
  • PyPI
    py-pongmaskgrand all versions
    MAL-2023-5457 checkmarx 2 IOCs
  • PyPI
    py-nvidiapaypalsuper all versions
    MAL-2023-5366 checkmarx 2 IOCs
  • PyPI
    libvirtualguistring all versions
    MAL-2023-4621 checkmarx 2 IOCs
  • PyPI
    libhackedpullpy all versions
    MAL-2023-4063 checkmarx 2 IOCs
  • PyPI
    libcvpippep all versions
    MAL-2023-3961 checkmarx 2 IOCs
  • PyPI
    esqintsupered all versions
    MAL-2023-3020 checkmarx 2 IOCs
  • PyPI
    tpsplitccinfo all versions
    MAL-2023-7581 checkmarx 2 IOCs
  • PyPI
    tpedstringad all versions
    MAL-2023-7007 checkmarx 2 IOCs
  • PyPI
    selfpullpingnvidia all versions
    MAL-2023-6506 checkmarx 2 IOCs
  • PyPI
    selfnvidiacraftinfo all versions
    MAL-2023-6350 checkmarx 2 IOCs
  • PyPI
    selfmcintelget all versions
    MAL-2023-6323 checkmarx 2 IOCs
  • PyPI
    py-httpedvirtual all versions
    MAL-2023-5174 checkmarx 2 IOCs
  • PyPI
    liburlccproof all versions
    MAL-2023-4586 checkmarx 2 IOCs
  • PyPI
    tpproofstringnvidia all versions
    MAL-2023-7417 checkmarx 2 IOCs
  • PyPI
    selfsuperramvirtual all versions
    MAL-2023-6679 checkmarx 2 IOCs
  • PyPI
    selfrelibstr all versions
    MAL-2023-6597 checkmarx 2 IOCs
  • PyPI
    selfrandompypep all versions
    MAL-2023-6581 checkmarx 2 IOCs
  • PyPI
    selfgetlgtbrand all versions
    MAL-2023-6094 checkmarx 2 IOCs
  • PyPI
    libcccvpull all versions
    MAL-2023-3889 checkmarx 2 IOCs
  • PyPI
    esqinthydrapost all versions
    MAL-2023-3007 checkmarx 2 IOCs
  • PyPI
    tpminecpurand all versions
    MAL-2023-7272 checkmarx 2 IOCs
  • PyPI
    py-getpepstring all versions
    MAL-2023-5123 checkmarx 2 IOCs
  • PyPI
    py-edccload all versions
    MAL-2023-5081 checkmarx 2 IOCs
  • PyPI
    libpingstringreplace all versions
    MAL-2023-4316 checkmarx 2 IOCs
  • PyPI
    tpsplitvirtualreplace all versions
    MAL-2023-7599 checkmarx 2 IOCs
  • PyPI
    tppyinfoinfo all versions
    MAL-2023-7463 checkmarx 2 IOCs
  • PyPI
    tppippushpip all versions
    MAL-2023-7368 checkmarx 2 IOCs
  • PyPI
    tpmineultragui all versions
    MAL-2023-7286 checkmarx 2 IOCs
  • PyPI
    tpinfourllgtb all versions
    MAL-2023-7146 checkmarx 2 IOCs
  • PyPI
    py-minerampy all versions
    MAL-2023-5354 checkmarx 2 IOCs
  • PyPI
    tpstrstrsplit all versions
    MAL-2023-7633 checkmarx 2 IOCs
  • PyPI
    tpramgrandcontrol all versions
    MAL-2023-7500 checkmarx 2 IOCs
  • PyPI
    selfcandygethydra all versions
    MAL-2023-5946 checkmarx 2 IOCs
  • PyPI
    py-minerandhydra all versions
    MAL-2023-5355 checkmarx 2 IOCs