Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,171 npm 223,993 PyPI 12,028 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,028 reports · Feed

  • PyPI
    selfmaskosintpyw all versions
    MAL-2023-6308 checkmarx 2 IOCs
  • PyPI
    libcontroladed all versions
    MAL-2023-3901 checkmarx 2 IOCs
  • PyPI
    esqkillinfocontrol all versions
    MAL-2023-3025 checkmarx 2 IOCs
  • PyPI
    tppushpushre all versions
    MAL-2023-7450 checkmarx 2 IOCs
  • PyPI
    tposintedhacked all versions
    MAL-2023-7307 checkmarx 2 IOCs
  • PyPI
    tpintstudytool all versions
    MAL-2023-7177 checkmarx 2 IOCs
  • PyPI
    py-infovirtualgame all versions
    MAL-2023-5222 checkmarx 2 IOCs
  • PyPI
    libramloadgame all versions
    MAL-2023-4435 checkmarx 2 IOCs
  • PyPI
    esqverrandcandy all versions
    MAL-2023-3528 checkmarx 2 IOCs
  • PyPI
    esqpycraftpost all versions
    MAL-2023-3289 checkmarx 2 IOCs
  • PyPI
    esqosintsuperosint all versions
    MAL-2023-3160 checkmarx 2 IOCs
  • PyPI
    tpedstringurl all versions
    MAL-2023-7008 checkmarx 2 IOCs
  • PyPI
    libsplitminecraft all versions
    MAL-2023-4496 checkmarx 2 IOCs
  • PyPI
    esqpostpyencode all versions
    MAL-2023-3239 checkmarx 2 IOCs
  • PyPI
    esqosintloadvm all versions
    MAL-2023-3151 checkmarx 2 IOCs
  • PyPI
    selfstradmc all versions
    MAL-2023-6630 checkmarx 2 IOCs
  • PyPI
    selfinfocvgame all versions
    MAL-2023-6194 checkmarx 2 IOCs
  • PyPI
    esqurlproofpaypal all versions
    MAL-2023-3510 checkmarx 2 IOCs
  • PyPI
    tptoolvisaver all versions
    MAL-2023-7667 checkmarx 2 IOCs
  • PyPI
    tppaypalcandypost all versions
    MAL-2023-7318 checkmarx 2 IOCs
  • PyPI
    tpadrandcv all versions
    MAL-2023-6911 checkmarx 2 IOCs
  • PyPI
    selfgrandpostinfo all versions
    MAL-2023-6119 checkmarx 2 IOCs
  • PyPI
    selfgamepullre all versions
    MAL-2023-6080 checkmarx 2 IOCs
  • PyPI
    esqrandominfopip all versions
    MAL-2023-3340 checkmarx 2 IOCs
  • PyPI
    tpcontrolloadcv all versions
    MAL-2023-6948 checkmarx 2 IOCs
  • PyPI
    selflgtbverhacked all versions
    MAL-2023-6268 checkmarx 2 IOCs
  • PyPI
    selfadedcandy all versions
    MAL-2023-5935 checkmarx 2 IOCs
  • PyPI
    esqstringcandypost all versions
    MAL-2023-3411 checkmarx 2 IOCs
  • PyPI
    esqpullkillsplit all versions
    MAL-2023-3266 checkmarx 2 IOCs
  • PyPI
    esqosintintver all versions
    MAL-2023-3150 checkmarx 2 IOCs
  • PyPI
    tpsuperproofpost all versions
    MAL-2023-7652 checkmarx 2 IOCs
  • PyPI
    selfmaskcandysuper all versions
    MAL-2023-6300 checkmarx 2 IOCs
  • PyPI
    tppullpyproof all versions
    MAL-2023-7437 checkmarx 2 IOCs
  • PyPI
    tpcvmcpy all versions
    MAL-2023-6989 checkmarx 2 IOCs
  • PyPI
    libvisaintrand all versions
    MAL-2023-4644 checkmarx 2 IOCs
  • PyPI
    selfhackedcandyvirtual all versions
    MAL-2023-6140 checkmarx 2 IOCs
  • PyPI
    selfcontrolgetstr all versions
    MAL-2023-5970 checkmarx 2 IOCs
  • PyPI
    libhackedpullload all versions
    MAL-2023-4062 checkmarx 2 IOCs
  • PyPI
    esqpeppostrand all versions
    MAL-2023-3184 checkmarx 2 IOCs
  • PyPI
    selfrereplacetool all versions
    MAL-2023-6615 checkmarx 2 IOCs