Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,169 npm 223,992 PyPI 12,027 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,027 reports · Feed

  • PyPI
    libpongurlvm all versions
    MAL-2023-4343 checkmarx 2 IOCs
  • PyPI
    selfpingloadreplace all versions
    MAL-2023-6427 checkmarx 2 IOCs
  • PyPI
    selfgethydrareplace all versions
    MAL-2023-6091 checkmarx 2 IOCs
  • PyPI
    py-osintnvidiastring all versions
    MAL-2023-5383 checkmarx 2 IOCs
  • PyPI
    esqedpingproof all versions
    MAL-2023-2844 checkmarx 2 IOCs
  • PyPI
    selfvisavisacpu all versions
    MAL-2023-6786 checkmarx 2 IOCs
  • PyPI
    tpgetstudypy all versions
    MAL-2023-7054 checkmarx 2 IOCs
  • PyPI
    libramhydralib all versions
    MAL-2023-4433 checkmarx 2 IOCs
  • PyPI
    esqstudystudygrand all versions
    MAL-2023-3458 checkmarx 2 IOCs
  • PyPI
    esqsplitguiram all versions
    MAL-2023-3391 checkmarx 2 IOCs
  • PyPI
    tppullsuperhttp all versions
    MAL-2023-7439 checkmarx 2 IOCs
  • PyPI
    selfrandponglib all versions
    MAL-2023-6586 checkmarx 2 IOCs
  • PyPI
    libstrreplacecpu all versions
    MAL-2023-4529 checkmarx 2 IOCs
  • PyPI
    tpnvidiapephttp all versions
    MAL-2023-7294 checkmarx 2 IOCs
  • PyPI
    selfpingintelcandy all versions
    MAL-2023-6424 checkmarx 2 IOCs
  • PyPI
    libverhttpmine all versions
    MAL-2023-4608 checkmarx 2 IOCs
  • PyPI
    tploadpulllgtb all versions
    MAL-2023-7235 checkmarx 2 IOCs
  • PyPI
    esqpygamevirtual all versions
    MAL-2023-3290 checkmarx 2 IOCs
  • PyPI
    selfgrandpushad all versions
    MAL-2023-6121 checkmarx 2 IOCs
  • PyPI
    tptoolvmpaypal all versions
    MAL-2023-7668 checkmarx 2 IOCs
  • PyPI
    tppywcandyping all versions
    MAL-2023-7478 checkmarx 2 IOCs
  • PyPI
    tppullpostgame all versions
    MAL-2023-7430 checkmarx 2 IOCs
  • PyPI
    tppaypalvmget all versions
    MAL-2023-7330 checkmarx 2 IOCs
  • PyPI
    selftoolintelnvidia all versions
    MAL-2023-6690 checkmarx 2 IOCs
  • PyPI
    selfrandompyint all versions
    MAL-2023-6580 checkmarx 2 IOCs
  • PyPI
    selfkillsplitpy all versions
    MAL-2023-6252 checkmarx 2 IOCs
  • PyPI
    libkillencodeed all versions
    MAL-2023-4139 checkmarx 2 IOCs
  • PyPI
    esqgamestringvm all versions
    MAL-2023-2885 checkmarx 2 IOCs
  • PyPI
    tppushlibpyw all versions
    MAL-2023-7445 checkmarx 2 IOCs
  • PyPI
    tpcraftlgtbload all versions
    MAL-2023-6977 checkmarx 2 IOCs
  • PyPI
    selfverpulled all versions
    MAL-2023-6746 checkmarx 2 IOCs
  • PyPI
    selfreplacemchydra all versions
    MAL-2023-6603 checkmarx 2 IOCs
  • PyPI
    selfminepywgui all versions
    MAL-2023-6343 checkmarx 2 IOCs
  • PyPI
    selfloadccpull all versions
    MAL-2023-6282 checkmarx 2 IOCs
  • PyPI
    selfinfogetrand all versions
    MAL-2023-6197 checkmarx 2 IOCs
  • PyPI
    py-strmaskmine all versions
    MAL-2023-5645 checkmarx 2 IOCs
  • PyPI
    libstrultrapush all versions
    MAL-2023-4530 checkmarx 2 IOCs
  • PyPI
    esqloadpaypalad all versions
    MAL-2023-3069 checkmarx 2 IOCs
  • PyPI
    esqkillpepproof all versions
    MAL-2023-3028 checkmarx 2 IOCs
  • PyPI
    esqhttpgetmask all versions
    MAL-2023-2949 checkmarx 2 IOCs