Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,169 npm 223,992 PyPI 12,027 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,027 reports · Feed

  • PyPI
    tphackedpullpaypal all versions
    MAL-2023-7102 checkmarx 2 IOCs
  • PyPI
    selfpywintelgrand all versions
    MAL-2023-6539 checkmarx 2 IOCs
  • PyPI
    selfliburlvirtual all versions
    MAL-2023-6280 checkmarx 2 IOCs
  • PyPI
    selfgamepongcc all versions
    MAL-2023-6077 checkmarx 2 IOCs
  • PyPI
    selfencoderampost all versions
    MAL-2023-6058 checkmarx 2 IOCs
  • PyPI
    py-strkillcraft all versions
    MAL-2023-5642 checkmarx 2 IOCs
  • PyPI
    libedencodemine all versions
    MAL-2023-3967 checkmarx 2 IOCs
  • PyPI
    esqreplaceedlgtb all versions
    MAL-2023-3366 checkmarx 2 IOCs
  • PyPI
    esqmccpunvidia all versions
    MAL-2023-3097 checkmarx 2 IOCs
  • PyPI
    esqcraftpipget all versions
    MAL-2023-2810 checkmarx 2 IOCs
  • PyPI
    tpultrarandpost all versions
    MAL-2023-7677 checkmarx 2 IOCs
  • PyPI
    tprelgtbvm all versions
    MAL-2023-7548 checkmarx 2 IOCs
  • PyPI
    tppostguistring all versions
    MAL-2023-7389 checkmarx 2 IOCs
  • PyPI
    selfverosintstring all versions
    MAL-2023-6743 checkmarx 2 IOCs
  • PyPI
    selfpywhydragui all versions
    MAL-2023-6538 checkmarx 2 IOCs
  • PyPI
    selfhackedrepong all versions
    MAL-2023-6159 checkmarx 2 IOCs
  • PyPI
    py-randnvidiapip all versions
    MAL-2023-5566 checkmarx 2 IOCs
  • PyPI
    py-mineencodeosint all versions
    MAL-2023-5346 checkmarx 2 IOCs
  • PyPI
    py-infokillpush all versions
    MAL-2023-5211 checkmarx 2 IOCs
  • PyPI
    py-httptoolstring all versions
    MAL-2023-5187 checkmarx 2 IOCs
  • PyPI
    libpongvisacpu all versions
    MAL-2023-4344 checkmarx 2 IOCs
  • PyPI
    esqpostgrandint all versions
    MAL-2023-3227 checkmarx 2 IOCs
  • PyPI
    esqcvnvidiapush all versions
    MAL-2023-2827 checkmarx 2 IOCs
  • PyPI
    selfvisavmgame all versions
    MAL-2023-6788 checkmarx 2 IOCs
  • PyPI
    selfinfoinfohydra all versions
    MAL-2023-6198 checkmarx 2 IOCs
  • PyPI
    py-virtualguipost all versions
    MAL-2023-5750 checkmarx 2 IOCs
  • PyPI
    py-randpepgrand all versions
    MAL-2023-5580 checkmarx 2 IOCs
  • PyPI
    py-pywmchydra all versions
    MAL-2023-5535 checkmarx 2 IOCs
  • PyPI
    py-pippycandy all versions
    MAL-2023-5446 checkmarx 2 IOCs
  • PyPI
    py-nvidiastringreplace all versions
    MAL-2023-5375 checkmarx 2 IOCs
  • PyPI
    libstringsplithttp all versions
    MAL-2023-4517 checkmarx 2 IOCs
  • PyPI
    libreplacemcultra all versions
    MAL-2023-4480 checkmarx 2 IOCs
  • PyPI
    esqhydraramhydra all versions
    MAL-2023-2970 checkmarx 2 IOCs
  • PyPI
    selfgrandpongcraft all versions
    MAL-2023-6118 checkmarx 2 IOCs
  • PyPI
    selfgameedultra all versions
    MAL-2023-6068 checkmarx 2 IOCs
  • PyPI
    py-ramurlencode all versions
    MAL-2023-5559 checkmarx 2 IOCs
  • PyPI
    py-postcandymc all versions
    MAL-2023-5465 checkmarx 2 IOCs
  • PyPI
    py-mcvergame all versions
    MAL-2023-5344 checkmarx 2 IOCs
  • PyPI
    libsplitvirtualload all versions
    MAL-2023-4502 checkmarx 2 IOCs
  • PyPI
    esqtoolgetnvidia all versions
    MAL-2023-3477 checkmarx 2 IOCs