Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,170 npm 223,992 PyPI 12,028 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,028 reports · Feed

  • PyPI
    esqtoolgetnvidia all versions
    MAL-2023-3477 checkmarx 2 IOCs
  • PyPI
    esqcraftloadpost all versions
    MAL-2023-2809 checkmarx 2 IOCs
  • PyPI
    esqccguihydra all versions
    MAL-2023-2754 checkmarx 2 IOCs
  • PyPI
    tpproofsplitint all versions
    MAL-2023-7416 checkmarx 2 IOCs
  • PyPI
    tpmineguipong all versions
    MAL-2023-7276 checkmarx 2 IOCs
  • PyPI
    selfpingspliturl all versions
    MAL-2023-6434 checkmarx 2 IOCs
  • PyPI
    selfpingcrafttool all versions
    MAL-2023-6423 checkmarx 2 IOCs
  • PyPI
    py-visapongmask all versions
    MAL-2023-5767 checkmarx 2 IOCs
  • PyPI
    py-tooladcraft all versions
    MAL-2023-5688 checkmarx 2 IOCs
  • PyPI
    py-ramstrencode all versions
    MAL-2023-5558 checkmarx 2 IOCs
  • PyPI
    py-minepingsplit all versions
    MAL-2023-5351 checkmarx 2 IOCs
  • PyPI
    py-intelmcad all versions
    MAL-2023-5234 checkmarx 2 IOCs
  • PyPI
    libpepcandymc all versions
    MAL-2023-4292 checkmarx 2 IOCs
  • PyPI
    libnvidiacpustr all versions
    MAL-2023-4250 checkmarx 2 IOCs
  • PyPI
    selfrandompywosint all versions
    MAL-2023-6582 checkmarx 2 IOCs
  • PyPI
    py-toolpaypalhydra all versions
    MAL-2023-5694 checkmarx 2 IOCs
  • PyPI
    libosintultrapyw all versions
    MAL-2023-4277 checkmarx 2 IOCs
  • PyPI
    libcvcandycontrol all versions
    MAL-2023-3952 checkmarx 2 IOCs
  • PyPI
    tpgametoolcontrol all versions
    MAL-2023-7041 checkmarx 2 IOCs
  • PyPI
    tpcpumcsuper all versions
    MAL-2023-6966 checkmarx 2 IOCs
  • PyPI
    tpcandygrandpost all versions
    MAL-2023-6922 checkmarx 2 IOCs
  • PyPI
    selfvmvisahacked all versions
    MAL-2023-6802 checkmarx 2 IOCs
  • PyPI
    selfpaypaladvm all versions
    MAL-2023-6385 checkmarx 2 IOCs
  • PyPI
    libgrandpaypalget all versions
    MAL-2023-4024 checkmarx 2 IOCs
  • PyPI
    esqpaypalpephydra all versions
    MAL-2023-3171 checkmarx 2 IOCs
  • PyPI
    esqadcvmc all versions
    MAL-2023-2721 checkmarx 2 IOCs
  • PyPI
    selfpostpywver all versions
    MAL-2023-6477 checkmarx 2 IOCs
  • PyPI
    selfosintrecandy all versions
    MAL-2023-6373 checkmarx 2 IOCs
  • PyPI
    py-supercandyreplace all versions
    MAL-2023-5679 checkmarx 2 IOCs
  • PyPI
    py-intedreplace all versions
    MAL-2023-5226 checkmarx 2 IOCs
  • PyPI
    libpostcpupaypal all versions
    MAL-2023-4348 checkmarx 2 IOCs
  • PyPI
    libedkillcraft all versions
    MAL-2023-3970 checkmarx 2 IOCs
  • PyPI
    esqtoolminemask all versions
    MAL-2023-3481 checkmarx 2 IOCs
  • PyPI
    esqencodetoolsuper all versions
    MAL-2023-2865 checkmarx 2 IOCs
  • PyPI
    tpstrposturl all versions
    MAL-2023-7626 checkmarx 2 IOCs
  • PyPI
    tpstrmaskpy all versions
    MAL-2023-7623 checkmarx 2 IOCs
  • PyPI
    py-osintgrandpush all versions
    MAL-2023-5379 checkmarx 2 IOCs
  • PyPI
    libnvidiacvmc all versions
    MAL-2023-4251 checkmarx 2 IOCs
  • PyPI
    esqguihttphydra all versions
    MAL-2023-2926 checkmarx 2 IOCs
  • PyPI
    tppullcpupull all versions
    MAL-2023-7422 checkmarx 2 IOCs