Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,170 npm 223,992 PyPI 12,028 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,028 reports · Feed

  • PyPI
    libkillhackedhttp all versions
    MAL-2023-4141 checkmarx 2 IOCs
  • PyPI
    esqrepullstring all versions
    MAL-2023-3377 checkmarx 2 IOCs
  • PyPI
    esqgamegrandmc all versions
    MAL-2023-2869 checkmarx 2 IOCs
  • PyPI
    tpmaskpullmine all versions
    MAL-2023-7247 checkmarx 2 IOCs
  • PyPI
    tphydrapongcc all versions
    MAL-2023-7129 checkmarx 2 IOCs
  • PyPI
    selfcraftramnvidia all versions
    MAL-2023-6008 checkmarx 2 IOCs
  • PyPI
    selfcontrolurlencode all versions
    MAL-2023-5983 checkmarx 2 IOCs
  • PyPI
    py-toollibcpu all versions
    MAL-2023-5693 checkmarx 2 IOCs
  • PyPI
    py-pushstudyrandom all versions
    MAL-2023-5521 checkmarx 2 IOCs
  • PyPI
    py-craftpongsuper all versions
    MAL-2023-5058 checkmarx 2 IOCs
  • PyPI
    libsuperpostcc all versions
    MAL-2023-4553 checkmarx 2 IOCs
  • PyPI
    esqsuperstrmine all versions
    MAL-2023-3471 checkmarx 2 IOCs
  • PyPI
    esqpostmaskre all versions
    MAL-2023-3235 checkmarx 2 IOCs
  • PyPI
    py-stringgamepep all versions
    MAL-2023-5632 checkmarx 2 IOCs
  • PyPI
    py-intsplitpong all versions
    MAL-2023-5250 checkmarx 2 IOCs
  • PyPI
    py-controlramnvidia all versions
    MAL-2023-5037 checkmarx 2 IOCs
  • PyPI
    libloadencodeencode all versions
    MAL-2023-4191 checkmarx 2 IOCs
  • PyPI
    libgameremask all versions
    MAL-2023-3996 checkmarx 2 IOCs
  • PyPI
    esqguipushpong all versions
    MAL-2023-2935 checkmarx 2 IOCs
  • PyPI
    esqcontrolintintel all versions
    MAL-2023-2781 checkmarx 2 IOCs
  • PyPI
    tpintencodepaypal all versions
    MAL-2023-7168 checkmarx 2 IOCs
  • PyPI
    tphydraedencode all versions
    MAL-2023-7121 checkmarx 2 IOCs
  • PyPI
    selfvisahydrastudy all versions
    MAL-2023-6773 checkmarx 2 IOCs
  • PyPI
    selfosintrandomram all versions
    MAL-2023-6372 checkmarx 2 IOCs
  • PyPI
    py-hydraadgrand all versions
    MAL-2023-5191 checkmarx 2 IOCs
  • PyPI
    libguivmcv all versions
    MAL-2023-4052 checkmarx 2 IOCs
  • PyPI
    esqpingvisapip all versions
    MAL-2023-3206 checkmarx 2 IOCs
  • PyPI
    tpverloadgui all versions
    MAL-2023-7699 checkmarx 2 IOCs
  • PyPI
    tppullproofpull all versions
    MAL-2023-7432 checkmarx 2 IOCs
  • PyPI
    selfcpulibpull all versions
    MAL-2023-5991 checkmarx 2 IOCs
  • PyPI
    selfadgrandgui all versions
    MAL-2023-5937 checkmarx 2 IOCs
  • PyPI
    libpingrandomad all versions
    MAL-2023-4314 checkmarx 2 IOCs
  • PyPI
    libhackedhackedgui all versions
    MAL-2023-4056 checkmarx 2 IOCs
  • PyPI
    tppushpephttp all versions
    MAL-2023-7447 checkmarx 2 IOCs
  • PyPI
    tppepccvm all versions
    MAL-2023-7331 checkmarx 2 IOCs
  • PyPI
    tpgamesuperpyw all versions
    MAL-2023-7040 checkmarx 2 IOCs
  • PyPI
    selfpipvisaload all versions
    MAL-2023-6452 checkmarx 2 IOCs
  • PyPI
    py-randproofvm all versions
    MAL-2023-5581 checkmarx 2 IOCs
  • PyPI
    py-controlpywrand all versions
    MAL-2023-5036 checkmarx 2 IOCs
  • PyPI
    tpvmintget all versions
    MAL-2023-7738 checkmarx 2 IOCs