Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,170 npm 223,992 PyPI 12,028 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,028 reports · Feed

  • PyPI
    selfverpullhydra all versions
    MAL-2023-6747 checkmarx 2 IOCs
  • PyPI
    py-gameintelpull all versions
    MAL-2023-5107 checkmarx 2 IOCs
  • PyPI
    py-cvmcmine all versions
    MAL-2023-5069 checkmarx 2 IOCs
  • PyPI
    libcpustrmask all versions
    MAL-2023-3933 checkmarx 2 IOCs
  • PyPI
    esqlgtbstudyram all versions
    MAL-2023-3044 checkmarx 2 IOCs
  • PyPI
    selfkillkillencode all versions
    MAL-2023-6247 checkmarx 2 IOCs
  • PyPI
    py-visavirtualpost all versions
    MAL-2023-5776 checkmarx 2 IOCs
  • PyPI
    py-cpuloadproof all versions
    MAL-2023-5046 checkmarx 2 IOCs
  • PyPI
    esqcpucrafturl all versions
    MAL-2023-2791 checkmarx 2 IOCs
  • PyPI
    tpmineintelpy all versions
    MAL-2023-7278 checkmarx 2 IOCs
  • PyPI
    selftoolguihttp all versions
    MAL-2023-6686 checkmarx 2 IOCs
  • PyPI
    py-urlpushpong all versions
    MAL-2023-5728 checkmarx 2 IOCs
  • PyPI
    py-edpullmask all versions
    MAL-2023-5085 checkmarx 2 IOCs
  • PyPI
    py-controlcontrolmc all versions
    MAL-2023-5026 checkmarx 2 IOCs
  • PyPI
    libsuperpongsuper all versions
    MAL-2023-4551 checkmarx 2 IOCs
  • PyPI
    libreplacehydraram all versions
    MAL-2023-4478 checkmarx 2 IOCs
  • PyPI
    libedmcpong all versions
    MAL-2023-3972 checkmarx 2 IOCs
  • PyPI
    esqosintvisapip all versions
    MAL-2023-3162 checkmarx 2 IOCs
  • PyPI
    tpsplitinfovirtual all versions
    MAL-2023-7583 checkmarx 2 IOCs
  • PyPI
    selfpongminehacked all versions
    MAL-2023-6459 checkmarx 2 IOCs
  • PyPI
    selfmaskgrandping all versions
    MAL-2023-6303 checkmarx 2 IOCs
  • PyPI
    selfintmaskkill all versions
    MAL-2023-6227 checkmarx 2 IOCs
  • PyPI
    py-splitcontrolrand all versions
    MAL-2023-5619 checkmarx 2 IOCs
  • PyPI
    py-lgtbgamevm all versions
    MAL-2023-5271 checkmarx 2 IOCs
  • PyPI
    py-cpuvirtualpip all versions
    MAL-2023-5052 checkmarx 2 IOCs
  • PyPI
    libpostponglgtb all versions
    MAL-2023-4358 checkmarx 2 IOCs
  • PyPI
    liblgtbadgui all versions
    MAL-2023-4154 checkmarx 2 IOCs
  • PyPI
    esqrandloadcraft all versions
    MAL-2023-3332 checkmarx 2 IOCs
  • PyPI
    esqpywpongencode all versions
    MAL-2023-3310 checkmarx 2 IOCs
  • PyPI
    esqpushpullmc all versions
    MAL-2023-3284 checkmarx 2 IOCs
  • PyPI
    esqnvidiaproofinfo all versions
    MAL-2023-3138 checkmarx 2 IOCs
  • PyPI
    tpurlstudyre all versions
    MAL-2023-7691 checkmarx 2 IOCs
  • PyPI
    tpgetvirtualpull all versions
    MAL-2023-7058 checkmarx 2 IOCs
  • PyPI
    py-toolgamenvidia all versions
    MAL-2023-5691 checkmarx 2 IOCs
  • PyPI
    py-stringpostmc all versions
    MAL-2023-5636 checkmarx 2 IOCs
  • PyPI
    libproofkillpong all versions
    MAL-2023-4369 checkmarx 2 IOCs
  • PyPI
    esqverinfomask all versions
    MAL-2023-3517 checkmarx 2 IOCs
  • PyPI
    esqlgtbcraftram all versions
    MAL-2023-3040 checkmarx 2 IOCs
  • PyPI
    tpcpuencodecc all versions
    MAL-2023-6961 checkmarx 2 IOCs
  • PyPI
    selfvmminehttp all versions
    MAL-2023-6796 checkmarx 2 IOCs