Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,170 npm 223,992 PyPI 12,028 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,028 reports · Feed

  • PyPI
    tppingloadgui all versions
    MAL-2023-7350 checkmarx 2 IOCs
  • PyPI
    tpcandyrandping all versions
    MAL-2023-6930 checkmarx 2 IOCs
  • PyPI
    selfverstrad all versions
    MAL-2023-6750 checkmarx 2 IOCs
  • PyPI
    py-adproofosint all versions
    MAL-2023-4992 checkmarx 2 IOCs
  • PyPI
    tprevmlib all versions
    MAL-2023-7580 checkmarx 2 IOCs
  • PyPI
    tppippingmc all versions
    MAL-2023-7366 checkmarx 2 IOCs
  • PyPI
    py-pushguire all versions
    MAL-2023-5514 checkmarx 2 IOCs
  • PyPI
    py-intpywhacked all versions
    MAL-2023-5249 checkmarx 2 IOCs
  • PyPI
    libvmpushpy all versions
    MAL-2023-4661 checkmarx 2 IOCs
  • PyPI
    libvercvint all versions
    MAL-2023-4604 checkmarx 2 IOCs
  • PyPI
    esqvisaminevm all versions
    MAL-2023-3548 checkmarx 2 IOCs
  • PyPI
    tpvirtualpullvm all versions
    MAL-2023-7711 checkmarx 2 IOCs
  • PyPI
    tpkillpipram all versions
    MAL-2023-7189 checkmarx 2 IOCs
  • PyPI
    libvisacandyver all versions
    MAL-2023-4637 checkmarx 2 IOCs
  • PyPI
    libreplacenvidiapost all versions
    MAL-2023-4481 checkmarx 2 IOCs
  • PyPI
    libloadpushvirtual all versions
    MAL-2023-4198 checkmarx 2 IOCs
  • PyPI
    selfsuperhttpsplit all versions
    MAL-2023-6677 checkmarx 2 IOCs
  • PyPI
    esqmaskkillcraft all versions
    MAL-2023-3085 checkmarx 2 IOCs
  • PyPI
    tposintosintrand all versions
    MAL-2023-7312 checkmarx 2 IOCs
  • PyPI
    selfminegrandkill all versions
    MAL-2023-6334 checkmarx 2 IOCs
  • PyPI
    py-virtualpywcraft all versions
    MAL-2023-5759 checkmarx 2 IOCs
  • PyPI
    py-rampaypalint all versions
    MAL-2023-5555 checkmarx 2 IOCs
  • PyPI
    selfhttpreplacestudy all versions
    MAL-2023-6173 checkmarx 2 IOCs
  • PyPI
    py-grandccultra all versions
    MAL-2023-5128 checkmarx 2 IOCs
  • PyPI
    esqpongkillmine all versions
    MAL-2023-3216 checkmarx 2 IOCs
  • PyPI
    esqsupercandyad all versions
    MAL-2023-3463 checkmarx 2 IOCs
  • PyPI
    esqsplitgrandvisa all versions
    MAL-2023-3390 checkmarx 2 IOCs
  • PyPI
    tppaypalproofre all versions
    MAL-2023-7325 checkmarx 2 IOCs
  • PyPI
    libvmloadpep all versions
    MAL-2023-4656 checkmarx 2 IOCs
  • PyPI
    libpepcpuad all versions
    MAL-2023-4295 checkmarx 2 IOCs
  • PyPI
    esqguipycc all versions
    MAL-2023-2936 checkmarx 2 IOCs
  • PyPI
    tppushcraftcpu all versions
    MAL-2023-7442 checkmarx 2 IOCs
  • PyPI
    tpstringverstudy all versions
    MAL-2023-7616 checkmarx 2 IOCs
  • PyPI
    selfverproofkill all versions
    MAL-2023-6744 checkmarx 2 IOCs
  • PyPI
    tplgtbpostre all versions
    MAL-2023-7204 checkmarx 2 IOCs
  • PyPI
    tpencodepushinfo all versions
    MAL-2023-7019 checkmarx 2 IOCs
  • PyPI
    selfmaskstudynvidia all versions
    MAL-2023-6312 checkmarx 2 IOCs
  • PyPI
    selfedpinggui all versions
    MAL-2023-6039 checkmarx 2 IOCs
  • PyPI
    py-proofreplacestudy all versions
    MAL-2023-5494 checkmarx 2 IOCs
  • PyPI
    libvisapostget all versions
    MAL-2023-4646 checkmarx 2 IOCs