Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,170 npm 223,992 PyPI 12,028 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,028 reports · Feed

  • PyPI
    libpaypalcontrolultra all versions
    MAL-2023-4280 checkmarx 2 IOCs
  • PyPI
    selfkillcontrollib all versions
    MAL-2023-6242 checkmarx 2 IOCs
  • PyPI
    py-pingpipkill all versions
    MAL-2023-5435 checkmarx 2 IOCs
  • PyPI
    esqpullinfoload all versions
    MAL-2023-3264 checkmarx 2 IOCs
  • PyPI
    liburlcontrolpull all versions
    MAL-2023-4587 checkmarx 2 IOCs
  • PyPI
    tprecraftvisa all versions
    MAL-2023-7543 checkmarx 2 IOCs
  • PyPI
    libcandyretool all versions
    MAL-2023-3884 checkmarx 2 IOCs
  • PyPI
    esqadhackedosint all versions
    MAL-2023-2723 checkmarx 2 IOCs
  • PyPI
    tpstudyproofhttp all versions
    MAL-2023-7639 checkmarx 2 IOCs
  • PyPI
    selfvermaskpush all versions
    MAL-2023-6742 checkmarx 2 IOCs
  • PyPI
    py-raminteled all versions
    MAL-2023-5552 checkmarx 2 IOCs
  • PyPI
    py-mcedcraft all versions
    MAL-2023-5331 checkmarx 2 IOCs
  • PyPI
    libvirtualnvidiamask all versions
    MAL-2023-4627 checkmarx 2 IOCs
  • PyPI
    esqvirtualgetmc all versions
    MAL-2023-3531 checkmarx 2 IOCs
  • PyPI
    esqinfokillinfo all versions
    MAL-2023-2982 checkmarx 2 IOCs
  • PyPI
    tprandpymask all versions
    MAL-2023-7536 checkmarx 2 IOCs
  • PyPI
    tppeppostreplace all versions
    MAL-2023-7337 checkmarx 2 IOCs
  • PyPI
    tpcontrolvmpost all versions
    MAL-2023-6958 checkmarx 2 IOCs
  • PyPI
    selfnvidiamccandy all versions
    MAL-2023-6352 checkmarx 2 IOCs
  • PyPI
    selfencodepywget all versions
    MAL-2023-6056 checkmarx 2 IOCs
  • PyPI
    py-ccvmpy all versions
    MAL-2023-5024 checkmarx 2 IOCs
  • PyPI
    esqpongpaypalnvidia all versions
    MAL-2023-3218 checkmarx 2 IOCs
  • PyPI
    esqkillramed all versions
    MAL-2023-3033 checkmarx 2 IOCs
  • PyPI
    esqinthackednvidia all versions
    MAL-2023-3006 checkmarx 2 IOCs
  • PyPI
    esqintencodecontrol all versions
    MAL-2023-3004 checkmarx 2 IOCs
  • PyPI
    tpinfourlmc all versions
    MAL-2023-7147 checkmarx 2 IOCs
  • PyPI
    tpguigetgui all versions
    MAL-2023-7079 checkmarx 2 IOCs
  • PyPI
    libpullproofencode all versions
    MAL-2023-4382 checkmarx 2 IOCs
  • PyPI
    libpostrestring all versions
    MAL-2023-4363 checkmarx 2 IOCs
  • PyPI
    esqstringcontrolstring all versions
    MAL-2023-3412 checkmarx 2 IOCs
  • PyPI
    esqpywresplit all versions
    MAL-2023-3318 checkmarx 2 IOCs
  • PyPI
    selfpepgameinfo all versions
    MAL-2023-6405 checkmarx 2 IOCs
  • PyPI
    selfkillpushhacked all versions
    MAL-2023-6251 checkmarx 2 IOCs
  • PyPI
    libreplacecraftnvidia all versions
    MAL-2023-4475 checkmarx 2 IOCs
  • PyPI
    libcvcvkill all versions
    MAL-2023-3955 checkmarx 2 IOCs
  • PyPI
    esqgetnvidiapip all versions
    MAL-2023-2898 checkmarx 2 IOCs
  • PyPI
    tpverurllgtb all versions
    MAL-2023-7702 checkmarx 2 IOCs
  • PyPI
    tpverloadget all versions
    MAL-2023-7698 checkmarx 2 IOCs
  • PyPI
    selfprooframad all versions
    MAL-2023-6496 checkmarx 2 IOCs
  • PyPI
    selfosintstringcpu all versions
    MAL-2023-6375 checkmarx 2 IOCs